Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-121023 1 Axxonsoft 1 Axxonnet Arp Agent 2026-11-03 5.5 Medium
Insertion of Sensitive Information into Log File (CWE-532) in the ARP Agent component in AxxonSoft AxxonNet before 3.25.0 on Windows and Linux allows a local attacker with read access to ARP Agent log files or support packages to obtain the plaintext password of the LDAP directory service account via WARNING-level log entries that contain serialized user synchronization data.
CVE-2026-121024 1 Axxonsoft 1 Axxonnet 2026-11-03 5.4 Medium
Incorrect Authorization (CWE-863) in the Health Monitoring service in AxxonSoft AxxonNet before 3.28.0 on Linux allows a remote attacker in possession of a shared report token, which is intended for read-only access, to create, modify or delete monitoring alerts via the monitoring API.