CVE-2026-121022

The record

Use of Default Password (CWE-1393) in the web client in AxxonSoft Axxon One before 3.0.0 on Windows and Linux allows a remote unauthenticated attacker to log in as the built-in administrator with the default credentials on a newly installed system, because the web client did not enforce the mandatory change of the default password on first login.

Affected packages

Related vulnerabilities

• CVE-2026-112030 A vulnerability was found in diem-project diem up to 5.1.3. CWE-1393
• CVE-2026-69657 XING CPTrans-ME-X contains a Use of Default Password (CWE-1393). CWE-1393
• CVE-2026-82698 A vulnerability was detected in sambitraj Student-Management-System up to… CWE-1393
• CVE-2026-19851 A Use of Default Password vulnerability affecting Tuleap Enterprise Edition from 17.0… CWE-1393
• CVE-2026-16504 Deployment of the VPS.org one-click Zulip template deploys a hardcoded application… CWE-1393
• CVE-2026-16503 Deployment of the VPS.org one-click Supabase template deploys a PostgreSQL instance that… CWE-1393
• CVE-2026-54445 vantage6 is an open-source infrastructure for privacy preserving analysis. CWE-1393
• CVE-2026-35075 An unauthenticated remote attacker can recover a default, hard coded password from a… CWE-1393