PT-2026-33500 · Anviz · Anviz Crosschex Standard

Published 2026-04-17 · Updated 2026-04-17 · CVE-2026-32650

NVD

CVSS v3.1

7.5

High

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Anviz CrossChex Standard is vulnerable when an attacker manipulates the TDS7 PreLogin to disable encryption, causing database credentials to be sent in plaintext and enabling unauthorized database access.

Fix

Weakness Enumeration

CWE-757

Related Identifiers

CVE-2026-32650

Affected Products

Anviz Crosschex Standard

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-32650 · Security Note
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-106-03.json · Note
• https://cisa.gov/news-events/ics-advisories/icsa-26-106-03 · Note
• https://anviz.com/contact-us.html · Note