CVE-2026-40434

CVE-2026-40434 is a HIGH severity vulnerability affecting Anviz CrossChek Standard that permits TCP packet injection attacks due to inadequate source verification in the client/server communication channel. An attacker positioned on the same network can inject malicious packets to alter or disrupt application traffic without requiring user interaction or special privileges. The vulnerability carries a CVSS score of 8.1, with an adjacent network attack vector and low complexity, meaning exploitation is straightforward for local network attackers. While confidentiality is not compromised, the flaw delivers high integrity and availability impacts through traffic manipulation and service disruption capabilities. There is currently no evidence of active exploitation in the wild, and the vulnerability does not appear on the KEV catalog or Hot List. The EPSS score of 0.0002 indicates minimal probability of near-term exploitation despite the high base severity, suggesting the threat remains theoretical at this time with limited community attention or available exploit code.