CVE-2026-121023Medium· 5.5▾ SunlitInsertion of Sensitive Information into Log File (CWE-532) in the ARP Agent component in AxxonSoft AxxonNet before 3.25.0 on Windows and Linux allows a local attacker with read access to ARP Agent log files or support packages to obtain …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 30.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Exploit-prediction probability, daily snapshots since Nov 5.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.1%
Insertion of Sensitive Information into Log File (CWE-532) in the ARP Agent component in AxxonSoft AxxonNet before 3.25.0 on Windows and Linux allows a local attacker with read access to ARP Agent log files or support packages to obtain the plaintext password of the LDAP directory service account via WARNING-level log entries that contain serialized user synchronization data.
axxonnet_arp_agent < 3.25.0Upgrade the ARP Agent to version 3.25.0 or later (delivered with Axxon One 2.0.16 and later). Rotate the password of the LDAP service account used for directory synchronization, and delete or restrict access to old ARP Agent log files and support packages.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-10221Medium· 5.5Insertion of Sensitive Information into Log File (CWE-532) in the ARP Agent component in AxxonSoft Axxon One / AxxonNet / C-WerkNet 2.0.4 and earlier on Windows platforms allows a local attacker to obtain plaintext credentials via readin…
CVE-2026-121024Medium· 5.4Read-Only Shared Token Allows Modification of Monitoring Alerts in AxxonNet
CVE-2026-121022High· 8.1Default Administrator Password Change Not Enforced in Axxon One Web Client
CVE-2026-121021Medium· 5.5Plaintext Storage of LDAP Password in Axxon One Shared Configuration
CVE-2026-121020Medium· 4.3User and Role Enumeration by Low-Privileged Users in Axxon One Security Configuration API
CVE-2019-1953Medium· 6.5A vulnerability in the web portal of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to view a password in clear text