Search vulnerabilities

Results 2

Export CSV
CVE-2026-121024

Read-Only Shared Token Allows Modification of Monitoring Alerts in AxxonNet

Incorrect Authorization (CWE-863) in the Health Monitoring service in AxxonSoft AxxonNet before 3.28.0 on Linux allows a remote attacker in possession of a shared report token, which is intended for read-only access, to create, modify or delete monitoring alerts via the monitoring API.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2026-121023

LDAP Bind Password Exposure in AxxonNet ARP Agent Logs

Insertion of Sensitive Information into Log File (CWE-532) in the ARP Agent component in AxxonSoft AxxonNet before 3.25.0 on Windows and Linux allows a local attacker with read access to ARP Agent log files or support packages to obtain the plaintext password of the LDAP directory service account via WARNING-level log entries that contain serialized user synchronization data.

CVSS 4.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors