Sensitive Information Exposure in AxxonSoft AxxonNet ARP Agent
CVE-2026-121023

6.8MEDIUM

Key Information:

Vendor

Axxonsoft

Status
Axxonnet Arp Agent
Vendor
CVE Published:
3 November 2026

What is CVE-2026-121023?

The ARP Agent component in AxxonSoft AxxonNet prior to version 3.25.0 is vulnerable to sensitive information exposure due to improper handling of log files. Local attackers with access to these log files may exploit WARNING-level entries to extract plaintext LDAP directory service account passwords. This can lead to further system compromises if the credentials are misused. It is crucial for users to secure access to log files and update to the latest version to mitigate this risk.

Affected Version(s)

AxxonNet ARP Agent Windows 0 < 3.25.0

References

https://www.axxonsoft.com/legal/axxonsoft-vulnerability-d...
vendor-advisory

CVSS V4

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Discovered internally by the AxxonSoft development team.
.