VULNERABILITY INTELLIGENCE

CVE-2026-32650

CVSS score7.5 HIGH
EPSS probability0.21%
CISA KEVNot currently listed
Published2026-04-17
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

Anviz CrossChex Standard is vulnerable when an attacker manipulates the TDS7 PreLogin to disable encryption, causing database credentials to be sent in plaintext and enabling unauthorized database access.

Weakness classification

  • CWE-757: Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')

Primary references