CVE-2026-32650— Anviz CrossChex Standard Algorithm Downgrade
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-32650
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Anviz CrossChex Standard Algorithm Downgrade
Source: NVD (National Vulnerability Database)
Vulnerability Description
Anviz CrossChex Standard is vulnerable when an attacker manipulates the TDS7 PreLogin to disable encryption, causing database credentials to be sent in plaintext and enabling unauthorized database access.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
在会话协商时选择低安全性的算法(算法降级)
Source: NVD (National Vulnerability Database)
Vulnerability Title
Anviz CrossChex Standard 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Anviz CrossChex Standard是美国Anviz公司的一款用于门禁与考勤数据管理的集中控制软件。 Anviz CrossChex Standard存在安全漏洞，该漏洞源于攻击者可操纵TDS7 PreLogin禁用加密，导致数据库凭据以明文发送，可能实现未授权的数据库访问。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Anviz | Anviz CrossChex Standard | All versions | - |
II. Public POCs for CVE-2026-32650
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-32650
Please Login to view more intelligence information
Same Patch Batch · Anviz · 2026-04-17 · 12 CVEs total
| CVE-2026-35546 | 9.8 CRITICAL | Anviz Products Missing Authentication for Critical Function |
| CVE-2026-35682 | 8.8 HIGH | Anviz CX2 Lite Command Injection |
| CVE-2026-40066 | 8.8 HIGH | Anviz Products Download of Code Without Integrity Check |
| CVE-2026-40434 | 8.1 HIGH | Anviz CrossChex Standard Improper Verification of Source of a Communication Channel |
| CVE-2026-32324 | 7.7 HIGH | Anviz CX7 Firmware Use of Hard-coded Cryptographic Key |
| CVE-2026-40461 | 7.5 HIGH | Anviz Products Missing Authentication for Critical Function |
| CVE-2026-33569 | 6.5 MEDIUM | Anviz Products Cleartext Transmission of Sensitive Information |
| CVE-2026-35061 | 5.3 MEDIUM | Anviz Products Missing Authorization |
| CVE-2026-32648 | 5.3 MEDIUM | Anviz Products Missing Authorization |
| CVE-2026-33093 | 5.3 MEDIUM | Anviz Products Missing Authorization |
| CVE-2026-31927 | 4.9 MEDIUM | Anviz CX7 Firmware Relative Path Traversal |
IV. Related Vulnerabilities
Same vendor: Anviz
- CVE-2026-40434
Anviz CrossChex Standard Improper Verification of Source of - CVE-2026-35682
Anviz CX2 Lite Command Injection - CVE-2026-40066
Anviz Products Download of Code Without Integrity Check - CVE-2026-35546
Anviz Products Missing Authentication for Critical Function - CVE-2026-40461
Anviz Products Missing Authentication for Critical Function
Same weakness: CWE-757
- CVE-2026-6550
Key commitment policy bypass via shared key cache in AWS Enc - CVE-2026-2673
OpenSSL TLS 1.3 server may choose unexpected key agreement g - CVE-2025-10693
Silicon Labs Z-Wave PIR Sensor Joins Network as Non-Secure - CVE-2025-59270
psPAS does not enforce TLS 1.2 within Get-PASSAMLResponse - CVE-2025-36582
Dell NetWorker 安全漏洞
V. Comments for CVE-2026-32650
No comments yet