CVE-2026-40434
Anviz CrossChex Standard lacks source verification in the client/server channel, enabling TCP packet injection by an attacker on the same network to alter or disrupt a…
Published Apr 17, 2026 · updated Jun 17, 2026 · anviz crosschex standard
Anviz CrossChex Standard lacks source verification in the client/server channel, enabling TCP packet injection by an attacker on the same network to alter or disrupt application traffic.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Apr 17, 2026 · NIST NVD
Detected
Anviz CrossChex Standard lacks source verification in the client/server channel, enabling TCP packet injection by an attacker on the same network to alter or disrupt application traffic.
Jun 17, 2026 · NIST NVD
Updated
Anviz CrossChex Standard lacks source verification in the client/server channel, enabling TCP packet injection by an attacker on the same network to alter or disrupt application traffic.
Affected
- cpe anviz/crosschex standardversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-40434
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-40434
Anviz CrossChex Standard lacks source verification in the client/server channel, enabling TCP packet injection by an attacker on the same network to alter or disrupt application traffic.
nvd.nist.gov