[ CVE-2026-121022 · Published 3 Nov 2026 ]
Vulnerability in AxxonSoft Axxon One
CVSS 8.1
EPSS <1%No fix listed yet
[ Description ]Official description
Use of Default Password (CWE-1393) in the web client in AxxonSoft Axxon One before 3.0.0 on Windows and Linux allows a remote unauthenticated attacker to log in as the built-in administrator with the default credentials on a newly installed system, because the web client did not enforce the mandatory change of the default password on first login.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.