CVE WATCH / VULNERABILITY DETAIL
CVE-2026-121020
MEDIUMCVSS 4.3NVD feed
Published 3 November 2026 · tracked since 3 November 2026
Description
Exposure of Sensitive Information to an Unauthorized Actor (CWE-200) in the security configuration API in AxxonSoft Axxon One before 3.2.0 on Windows and Linux allows a remote authenticated user with limited privileges to enumerate all user accounts and roles configured in the system via the user co
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-121443 MEDIUM 5.3
- CVE-2026-121444 HIGH 7.5
- CVE-2026-121435 MEDIUM 4.3
- CVE-2026-121436 HIGH 7.2
- CVE-2026-121417 HIGH 7.8
- CVE-2026-121392 HIGH 7.4
- CVE-2026-118527 MEDIUM 4.3
- CVE-2026-106991 HIGH 7.1
- CVE-2026-119742 HIGH 7.2
- CVE-2026-119179 HIGH 7