NVD security advisoryCritical
Critical advisory for Use of Default Password (CWE-1393) in th
CVE-2026-121022 · Reported 3 Nov 2026
Full advisory details, affected packages, severity context, and original source.
Affected technology
Use of Default Password (CWE-1393) in thLinux ecosystem
Advisory overview
Use of Default Password (CWE-1393) in the web client in AxxonSoft Axxon One before 3.0.0 on Windows and Linux allows a remote unauthenticated attacker to log in as the built-in administrator with the default credentials on a newly installed system, because the web client did not enforce the mandatory change of the default password on first login.
