Skip to content
CVE PROGRAM SOURCE RECORD9.2 Critical

CVE-2026-121022

Default Administrator Password Change Not Enforced in Axxon One Web Client

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AxxonSoft

Description

Use of Default Password (CWE-1393) in the web client in AxxonSoft Axxon One before 3.0.0 on Windows and Linux allows a remote unauthenticated attacker to log in as the built-in administrator with the default credentials on a newly installed system, because the web client did not enforce the mandatory change of the default password on first login.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AxxonSoft Axxon One

Default version status: unaffected

  • 0 to < 3.0.0affected

References