Is CVE-2026-121022 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-121022?

CVE-2026-121022 has a CVSS v3 severity of HIGH (8.1).

Back

CVE-2026-121022

Description

Use of Default Password (CWE-1393) in the web client in AxxonSoft Axxon One before 3.0.0 on Windows and Linux allows a remote unauthenticated attacker to log in as the built-in administrator with the default credentials on a newly installed system, because the web client did not enforce the mandatory change of the default password on first login.