Ozols
Monthly
Remote code execution in Ozols Grupa OZOLS on Windows (all versions before 1.1.1233) stems from an abandoned automatic-update domain that the OzolsSQL client still trusts. Because updates are pulled over cleartext with no integrity or signature check, anyone who re-registers the lapsed domain (or performs a network MITM) can serve a malicious serv_update.vbs that the <db>_update SQL Server Agent job executes as ActiveScripting, yielding full host compromise. The flaw carries a CVSS 4.0 base of 10.0; it was reported by ENISA (EUVD-2026-62704) with a vendor patch available, and no public exploit or CISA KEV listing is identified at time of analysis.
Remote code execution in Ozols Grupa OZOLS on Windows (all versions before 1.1.1233) stems from an abandoned automatic-update domain that the OzolsSQL client still trusts. Because updates are pulled over cleartext with no integrity or signature check, anyone who re-registers the lapsed domain (or performs a network MITM) can serve a malicious serv_update.vbs that the <db>_update SQL Server Agent job executes as ActiveScripting, yielding full host compromise. The flaw carries a CVSS 4.0 base of 10.0; it was reported by ENISA (EUVD-2026-62704) with a vendor patch available, and no public exploit or CISA KEV listing is identified at time of analysis.