CVE-2026-32650

CVE-2026-32650 affects Anviz CrossChex Standard and involves a TDS7 PreLogin manipulation vulnerability that allows attackers to disable database encryption, forcing credentials to transmit in plaintext. This flaw enables unauthorized database access without authentication requirements. The vulnerability carries a CVSS score of 7.5 (HIGH) with a network-based attack vector, low complexity, and no authentication prerequisites, indicating significant confidentiality risk despite lacking integrity or availability impact. The moderate FAUCET risk score of 38.0/100 reflects the serious nature of plaintext credential exposure. Exploitation status indicates this vulnerability is not currently being leveraged in the wild, as evidenced by its absence from the Known Exploited Vulnerabilities catalog and inactive hot list status. However, the extremely low EPSS score suggests limited proof-of-concept availability or practical exploitation attempts to date, though organizations should prioritize patching given the straightforward attack methodology and high confidentiality impact.