PT-2026-33500 · Anviz · Crosschex Standard

Published 2026-04-17 · Updated 2026-05-04 · CVE-2026-32650

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Anviz CrossChex Standard (affected versions not specified)

Description An attacker can manipulate the TDS7 PreLogin to disable encryption, which results in database credentials being transmitted in plaintext. This allows for unauthorized access to the database.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-757

Related Identifiers

CVE-2026-32650

Affected Products

Crosschex Standard

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-32650 · Security Note
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-106-03.json · Note
• https://twitter.com/CVEnew/status/2045467415975264607 · Twitter Post
• https://t.me/cveNotify/162028 · Telegram Post
• https://anviz.com/contact-us.html · Note
• https://cisa.gov/news-events/ics-advisories/icsa-26-106-03 · Note
• https://twitter.com/infoflowcloud/status/2045469761052549406 · Twitter Post