MEDIUMCVSS v3.1 5.4Vulnerability

CVE-2026-121024

Incorrect Authorization (CWE-863) in the Health Monitoring service in AxxonSoft AxxonNet before 3.28.0 on Linux allows a remote attacker in possession of a shared report token, which is intended for read-only access, to create, modify or delete monitoring alerts via the monitoring API.

Properties

Severity
MEDIUM
Nvd fetched at
2026-11-03T13:13:35.796279+00:00
Cvss score
5.4
Cvss severity
MEDIUM
Retrieved at
2026-11-03T13:14:57+00:00
Score
5.4
Last source
NVD
Cvss version
3.1
Cve id
CVE-2026-121024
Cvss vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
First seen by Signal
2026-11-03T13:14:57+00:00
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Published at
2026-11-03T09:17:12.337
Last modified
2026-11-03T09:17:12.337

Related Entities (1)

HAS_WEAKNESS (1)

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-121024 (CVSS v3.1 5.4) — Ninja Signal Threat Intelligence | Ninja Signal