CVE-2026-121023

The record

Insertion of Sensitive Information into Log File (CWE-532) in the ARP Agent component in AxxonSoft AxxonNet before 3.25.0 on Windows and Linux allows a local attacker with read access to ARP Agent log files or support packages to obtain the plaintext password of the LDAP directory service account via WARNING-level log entries that contain serialized user synchronization data.

Affected packages

Related vulnerabilities

• CVE-2026-63417 Logging Redactor is a Python library designed to redact sensitive data in logs based on… CWE-532
• CVE-2026-120673 A component of the MongoDB Rust Driver that records diagnostic tracing data can capture… CWE-532
• CVE-2026-18800 When an Event Publisher output adapter is configured with properties that are irrelevant… CWE-532
• CVE-2026-20592 In Modem, there is a possible information disclosure due to side channel information… CWE-532
• CVE-2026-62347 Element Call is a native Matrix video conferencing application. CWE-532
• CVE-2026-119117 Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for… CWE-532
• CVE-2026-119290 Zuke is a code-first, strongly typed build automation system for Deno. CWE-532
• CVE-2026-59388 Cloud Controller (CAPI) leaks sensitive data into audit logs in multiple instances… CWE-532