Medium severity5.4NVD Advisory· Published Nov 3, 2026

CVE-2026-121024

Description

Incorrect Authorization (CWE-863) in the Health Monitoring service in AxxonSoft AxxonNet before 3.28.0 on Linux allows a remote attacker in possession of a shared report token, which is intended for read-only access, to create, modify or delete monitoring alerts via the monitoring API.

Affected products

AxxonSoft/AxxonNetllm-fuzzy
Range: <3.28.0

Patches

Vulnerability mechanics

References

www.axxonsoft.com/legal/axxonsoft-vulnerability-disclosure-policy/security-advisoriesnvd

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000