Is CVE-2026-121024 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-121024?

CVE-2026-121024 has a CVSS v3 severity of MEDIUM (5.4).

Back

CVE-2026-121024

Description

Incorrect Authorization (CWE-863) in the Health Monitoring service in AxxonSoft AxxonNet before 3.28.0 on Linux allows a remote attacker in possession of a shared report token, which is intended for read-only access, to create, modify or delete monitoring alerts via the monitoring API.