CVE-2026-32650CWE-757
Anviz CrossChex Standard Algorithm Downgrade
High · published April 17, 2026
What it is
Anviz CrossChex Standard is vulnerable when an attacker manipulates the TDS7 PreLogin to disable
encryption, causing database credentials to be sent in plaintext and
enabling unauthorized database access.
The record
Technical detail
- CVSS v3.1
- 7.5 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00344 · 26.7th percentile
- Weakness
- CWE-757 · Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')
- Published
- 2026-04-17T19:52Z
EPSS history
Timeline