AAxxonSoft

Products

Exploited and recent CVEs

• CVE-2026-121024 Medium 5.4 Read-Only Shared Token Allows Modification of Monitoring Alerts in AxxonNet 0.2%
• CVE-2026-121023 Medium 5.5 LDAP Bind Password Exposure in AxxonNet ARP Agent Logs 0.1%
• CVE-2026-121022 High 8.1 Default Administrator Password Change Not Enforced in Axxon One Web Client 0.4%
• CVE-2026-121021 Medium 5.5 Plaintext Storage of LDAP Password in Axxon One Shared Configuration <0.1%
• CVE-2026-121020 Medium 4.3 User and Role Enumeration by Low-Privileged Users in Axxon One Security Configuration API 0.2%
• CVE-2025-10227 Medium 4.6 Lack of Encryption in Object Archive in AxxonSoft Axxon One (C-Werk) before 2.0.8 <0.1%
• CVE-2025-10226 Critical 9.8 PostgreSQL Upgrade from v10 to v17.4 in AxxonSoft Axxon One (C-Werk) 2.0.8 and earlier to Address Multiple Vulnerabilities 0.6%
• CVE-2025-10225 High 7.5 Incorrect Memory Allocation in OpenSSL-Based Session Module in AxxonSoft Axxon One (C-Werk) 0.4%
• CVE-2025-10224 Medium 5.4 Incorrect Evaluation of LDAP Nested Groups during Login in AxxonSoft Axxon One (C-Werk) 0.3%
• CVE-2025-10223 Medium 5.4 Improper Session Cleanup on Role Removal in Web Admin Panel in AxxonSoft Axxon One (C-Werk) 0.3%
• CVE-2025-10222 Low 3.3 Sensitive Information Disclosure in Diagnostic Dumps in AxxonSoft Axxon One VMS 0.1%
• CVE-2025-10221 Medium 5.5 Hardcoded Password Exposure in AxxonNet (C-WerkNet) ARP Agent Logs 0.1%
• CVE-2025-10220 Critical 9.8 Outdated Third-Party NuGet Packages in AxxonSoft Axxon One VMS 2.0.0 through 2.0.4 0.7%