CVE-2026-121021
Medium · 5.5CVSS
5.5
EPSS
0.1%
Published
Nov 3, 2026
CISA due date
—
The record
Plaintext Storage of a Password (CWE-256) in the SecurityManager shared configuration in AxxonSoft Axxon One before 3.1.0 on Windows and Linux allows a local attacker with read access to the configuration directory or to configuration backups to obtain the password of the LDAP directory service account via the main.conf configuration file.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-86715 Plaintext storage of a password vulnerability in Crypttech Crypto and Informatics… CWE-256
- CVE-2026-103094 ServiceNow has remediated an information disclosure vulnerability that was identified in… CWE-256
- CVE-2026-110975 A flaw was found in Kruize Autotune. CWE-256
- CVE-2026-19051 Plaintext storage of a password vulnerability in Menulux Software Inc. CWE-256
- CVE-2026-15933 OptimiDoc Server (On-Premise) stores credentials for external services in cleartext. CWE-256
- CVE-2021-38489 HDD password plaintext is stored in a UEFI variable. CWE-256
- CVE-2026-55164 Lemur manages TLS certificate creation. CWE-256
- CVE-2026-50641 Streamsoft Business Intelligence (BI) stores users' passwords in plaintext form in the… CWE-256