Encryption Weakness in Anviz CrossChex Standard Product

CVE-2026-32650

What is CVE-2026-32650?

Anviz CrossChex Standard presents a security vulnerability wherein an attacker can manipulate the TDS7 PreLogin process to disable encryption. This flaw allows sensitive database credentials to be transmitted in plaintext, thereby facilitating unauthorized access to the database. Organizations utilizing this product should take immediate action to safeguard against potential exploitation by restricting access and reviewing configurations.

References