Security Advisory

CVE-2026-22306

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-19 19:25:10

Last updated 2026-08-19 19:25:10

Assigner ENISA

CVSS score 10.0

State PUBLISHED

Description

Download of code without integrity check, inclusion of functionality from untrusted control sphere, and cleartext transmission of sensitive information vulnerability in Ozols Grupa OZOLS on Windows caused by an abandoned auto-update domain. Affected component: the automatic update channel - OzolsSQL client update path, the <db>_update SQL Server Agent job (@subsystem = N'ActiveScripting') and serv_update.vbs. This issue affects OZOLS: before 1.1.1233.

← Browse all CVEs View on cve.org ↗