PT-2026-136048

CVE-2026-121024

·

Published

2026-11-03

·

Updated

2026-11-03

Description by

CVSS 3.1
5.4
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Incorrect Authorization (CWE-863) in the Health Monitoring service in AxxonSoft AxxonNet before 3.28.0 on Linux allows a remote attacker in possession of a shared report token, which is intended for read-only access, to create, modify or delete monitoring alerts via the monitoring API.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-863: Incorrect Authorization
Related identifiers
CVE-2026-121024
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com