VulnSocial

CVE-2026-32650Disclosure(anviz / crosschex_standard)

LOWCVSS 7.5 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Anviz CrossChex Standard is vulnerable when an attacker manipulates the TDS7 PreLogin to disable encryption, causing database credentials to be sent in plaintext and enabling unauthorized database access.

anviz CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-757

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • crosschex_standard

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Affected systems

Vendors
anviz
Products
crosschex_standard

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-04-18: 2Technical Details · 2026-04-18: 204-18
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-32650 Anviz CrossChex Standard is vulnerable when an attacker manipulates the TDS7 PreLogin to disable encryption, causing database credentials to be sent in plaintext and… https://www.cve.org/CVERecord?id=CVE-2026-32650 ----- Traducción: CVE-2026-32650 Anv… http://infoflow.cloud`

    Post summary

    CVE-2026-32650 reveals that an attacker can manipulate the TDS7 PreLogin in Anviz CrossChex Standard to turn off encryption, sending database credentials in plaintext.

    0000034
    72 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-32650 Anviz CrossChex Standard is vulnerable when an attacker manipulates the TDS7 PreLogin to disable encryption, causing database credentials to be sent in plaintext and… https://www.cve.org/CVERecord?id=CVE-2026-32650

    Post summary

    The CVE disclosure highlights that an attacker can disable encryption during the TDS7 PreLogin, leading to plaintext transmission of database credentials.

    00000172
    57.2K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appanvizcrosschex_standard---

Explore more

Back to dashboardanviz CVEscrosschex_standard vulnerabilities