CVE-2026-40434

HighCVSS 8.1

Published: 17/04/2026(UTC)Updated: 26/10/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.23%

14th percentile - higher than 14% of all known CVEs

Summary

Anviz CrossChex Standard lacks source verification in the client/server channel, allowing an attacker on the same network to inject TCP packets, potentially altering or disrupting application traffic.

Risk Assessment

The lack of source verification poses a risk of compromising application communication, which can lead to significant disruptions in system operation.

Recommendation

It is recommended to implement source verification mechanisms and encrypt communication to protect against TCP packet injection attacks.

Other vulnerabilities in Anviz CrossChex Standard

CVE-2026-32650High
Anviz CrossChex Standard is vulnerable when an attacker manipulates the TDS7 PreLogin to disable encryption. As a result, database credentials are sent in plaintext, enabling unauthorized database access.

Original NVD description (English source)

Anviz CrossChex Standard lacks source verification in the client/server channel, enabling TCP packet injection by an attacker on the same network to alter or disrupt application traffic.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS