CVE-2026-32650

High

Published: 17/04/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Anviz CrossChex Standard is vulnerable when an attacker manipulates the TDS7 PreLogin to disable encryption. As a result, database credentials are sent in plaintext, enabling unauthorized database access.

Risk Assessment

The risk to the organization involves the potential for unauthorized access to sensitive data in the database, which could lead to loss of confidentiality and integrity of information.

Recommendation

It is recommended to update Anviz CrossChex Standard to the latest version to patch this vulnerability and implement additional security measures such as monitoring database access.

Other vulnerabilities in Anviz CrossChex Standard

CVE-2026-40434High
Anviz CrossChex Standard lacks source verification in the client/server channel, allowing an attacker on the same network to inject TCP packets, potentially altering or disrupting application traffic.

Original NVD description (English source)

Anviz CrossChex Standard is vulnerable when an attacker manipulates the TDS7 PreLogin to disable encryption, causing database credentials to be sent in plaintext and enabling unauthorized database access.