CVE-2025-68721

Axigen Mail Server versions prior to 10.5.57 are vulnerable to an improper access control flaw in the WebAdmin interface. A delegated administrator account with zero permissions can bypass security checks to reach the SSL Certificates management endpoint (page=sslcerts). This unauthorized access ...