一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月4日

CVE-2026-22306 [CRITICAL] – Download of code without integrity check, inclusion of functionality from untrusted contro

未分类
📑 文章目录

Download of code without integrity check, inclusion of functionality from untrusted control sphere, and cleartext
transmission of sensitive information vulnerability in Ozols Grupa OZOLS
on Windows caused by an abandoned auto-update domain. Affected
component: the automatic update channel – OzolsSQL client update path, the _update SQL Server Agent job (@subsystem = N’ActiveScripting’) and serv_update.vbs.

This issue affects OZOLS: before 1.1.1233.