A critical vulnerability (CVE-2026-22306) has been identified in Ozols Grupa OZOLS, impacting versions prior to 1.1.1233. The flaw arises from the lack of integrity checks during code downloads, allowing untrusted updates to be executed. This affects the automatic update channel (OzolsSQL client update path), the <db>_update SQL Server Agent job (@subsystem = N'ActiveScripting'), and serv_update.vbs. Attackers can exploit this to inject malicious code, leading to remote code execution. The CVSS score of 10.0 reflects the high severity. Organizations using affected versions of Ozols Grupa OZOLS should immediately apply the latest security patches and disable the automatic update feature until updates are applied. Additionally, network segmentation and monitoring for unusual activity are recommended to mitigate potential exploitation.