CVE-2026-121024

Incorrect Authorization CWE-863 in the Health Monitoring service in AxxonSoft AxxonNet before 3.28.0 on Linux allows a remote attacker in possession of a shared report token, which is intended for read-only access, to create, modify or delete monitoring alerts via the monitoring API...

CVE-2026-121023

Insertion of Sensitive Information into Log File CWE-532 in the ARP Agent component in AxxonSoft AxxonNet before 3.25.0 on Windows and Linux allows a local attacker with read access to ARP Agent log files or support packages to obtain the plaintext password of the LDAP directory service account v...

CVE-2026-121024

AxsonSoft AxxonNet versions prior to 3.28.0 on Linux are affected by an Incorrect Authorization (CWE-863) vulnerability in the Health Monitoring service . A remote attacker who obtains a shared report token —intended only for read-only access—can exploit this flaw to create, modify, or delete mon...

EUVD-2026-115711

Incorrect Authorization CWE-863 in the Health Monitoring service in AxxonSoft AxxonNet before 3.28.0 on Linux allows a remote attacker in possession of a shared report token, which is intended for read-only access, to create, modify or delete monitoring alerts via the monitoring API...

CVE-2026-121023

AxxonSoft AxxonNet is affected by a vulnerability in the ARP Agent component prior to version 3.25.0 on Windows and Linux. The issue stems from the Insertion of Sensitive Information into Log File (CWE-532) , where the component generates WARNING-level log entries containing serialized user synch...

EUVD-2026-115712

Insertion of Sensitive Information into Log File CWE-532 in the ARP Agent component in AxxonSoft AxxonNet before 3.25.0 on Windows and Linux allows a local attacker with read access to ARP Agent log files or support packages to obtain the plaintext password of the LDAP directory service account v...

CVE-2025-10221

CVE-2025-10221 concerns the ARP Agent component in AxxonSoft Axxon One / AxxonNet / C-WerkNet 2.0.4 and earlier on Windows. The root cause is insertion of sensitive information into TRACE log files, allowing a local attacker to read serialized JSON with passwords and obtain plaintext credentials....

AxxonSoft AxxonOne and AxxonSoft AxxonNet security vulnerabilities

AxxonSoft AxxonOne and AxxonSoft AxxonNet are both products of AxxonSoft Ireland.AxxonSoft AxxonOne is a video surveillance and security management software.AxxonSoft AxxonNet is a cloud-based video surveillance and management platform. A security vulnerability exists in AxxonSoft AxxonOne and...