https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 20:34:23 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-268279 EUVD-2026-268279 https://cve.radiocsirt.org/vuln/euvd-2026-268279 https://cve.radiocsirt.org/vuln/fkie_cve-2025-68721 <p>Axigen Mail Server before 10.5.57 contains an improper access control vulnerability in the WebAdmin interface. A delegated admin account with zero permissions can bypass access control checks and gain unauthorized access to the SSL Certificates management endpoint (page=sslcerts). This allows the attacker to view, download, upload, and delete SSL certificate files, despite lacking the necessary privileges to access the Security &amp; Filtering section.</p> <p>Axigen Mail Server before 10.5.57 contains an improper access control vulnerability in the WebAdmin interface. A delegated admin account with zero permissions can bypass access control checks and gain unauthorized access to the SSL Certificates management endpoint (page=sslcerts). This allows the attacker to view, download, upload, and delete SSL certificate files, despite lacking the necessary privileges to access the Security &amp; Filtering section.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-68721 https://cve.radiocsirt.org/vuln/ghsa-5m2c-5h5x-7j8g <p>Axigen Mail Server before 10.5.57 contains an improper access control vulnerability in the WebAdmin interface. A delegated admin account with zero permissions can bypass access control checks and gain unauthorized access to the SSL Certificates management endpoint (page=sslcerts). This allows the attacker to view, download, upload, and delete SSL certificate files, despite lacking the necessary privileges to access the Security &amp; Filtering section.</p> <p>Axigen Mail Server before 10.5.57 contains an improper access control vulnerability in the WebAdmin interface. A delegated admin account with zero permissions can bypass access control checks and gain unauthorized access to the SSL Certificates management endpoint (page=sslcerts). This allows the attacker to view, download, upload, and delete SSL certificate files, despite lacking the necessary privileges to access the Security &amp; Filtering section.</p> https://cve.radiocsirt.org/vuln/ghsa-5m2c-5h5x-7j8g