Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-121024

Read-Only Shared Token Allows Modification of Monitoring Alerts in AxxonNet

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AxxonSoft

Description

Incorrect Authorization (CWE-863) in the Health Monitoring service in AxxonSoft AxxonNet before 3.28.0 on Linux allows a remote attacker in possession of a shared report token, which is intended for read-only access, to create, modify or delete monitoring alerts via the monitoring API.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AxxonSoft AxxonNet

Default version status: unaffected

  • 0 to < 3.28.0affected

References