CVE-2026-22306

CriticalCVSS 10.0/10Last modified Sep 1, 2026

Description

Download of code without integrity check, inclusion of functionality from untrusted control sphere, and cleartext transmission of sensitive information vulnerability in Ozols Grupa OZOLS on Windows caused by an abandoned auto-update domain. Affected component: the automatic update channel - OzolsSQL client update path, the <db>_update SQL Server Agent job (@subsystem = N'ActiveScripting') and serv_update.vbs.

This issue affects OZOLS: before 1.1.1233.

Metrics

CVSS 3.1 10.0/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-319 CWE-494 CWE-829

Affected software

No affected versions have been published.

Timeline

Published: Aug 19, 2026
Last modified: Sep 1, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-22317.2The Fluent Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in all versions up to, and incl CVE-2026-223128.6The device has a webserver that exposes a REST API authenticated with a constant token. The unauthenticated API can be used by an attacker t CVE-2026-223139.1The device has a webserver that exposes a REST API authenticated with a token on the management network. By exploiting an OS command injecti CVE-2026-223166.5A remote attacker with user privileges for the webUI can use the setting of the TFTP Filename with a POST Request to trigger a stack-based B CVE-2026-223177.2A command injection vulnerability in the device’s Root CA certificate transfer workflow allows a high-privileged attacker to send crafted HT CVE-2026-223184.9A stack-based buffer overflow vulnerability in the device's file transfer parameter workflow allows a high-privileged attacker to send overs CVE-2026-223194.9A stack-based buffer overflow in the device's file installation workflow allows a high-privileged attacker to send oversized POST parameters CVE-2026-22327.5The Product Table and List Builder for WooCommerce Lite plugin for WordPress is vulnerable to time-based SQL Injection via the 'search' para CVE-2026-223206.5A stack-based buffer overflow in the CLI's TFTP file‑transfer command handling allows a low-privileged attacker with Telnet/SSH access to tr CVE-2026-223215.3A stack-based buffer overflow in the device's Telnet/SSH CLI login routine occurs when a unauthenticated attacker send an oversized or unexp CVE-2026-223227.1A stored cross‑site scripting (XSS) vulnerability in the Link Aggregation configuration interface allows an unauthenticated remote attacker CVE-2026-223237.1A CSRF vulnerability in the Link Aggregation configuration interface allows an unauthenticated remote attacker to trick authenticated users