CVE-2026-22306 in OZOLSالمعلومات

الملخص

بحسب MITRE • 19/08/2026

Download of code without integrity check, inclusion of functionality from untrusted control sphere, and cleartext transmission of sensitive information vulnerability in Ozols Grupa OZOLS on Windows caused by an abandoned auto-update domain. Affected component: the automatic update channel - OzolsSQL client update path, the <db>_update SQL Server Agent job (@subsystem = N'ActiveScripting') and serv_update.vbs.

This issue affects OZOLS: before 1.1.1233.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

مسؤول

ENISA

حجز

07/01/2026

إفشاء

19/08/2026

الاعتدال

تمت الموافقة

إدخال

VDB-393335

EPSS

0.00154

KEV

لا

النشاطات

منخفض

المصادر

Want to stay up to date on a daily basis?

Enable the mail alert feature now!