CVE-2025-10226: critical vulnerability in AxxonSoft AxxonOne C-Werk
PostgreSQL Upgrade from v10 to v17.4 in AxxonSoft Axxon One (C-Werk) 2.0.8 and earlier to Address Multiple Vulnerabilities
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
AxxonSoft Axxon One uses an outdated version of PostgreSQL (v10) that contains multiple known security vulnerabilities. A remote attacker can exploit these flaws to gain unauthorized access, run malicious code, or crash the system.
CWE-1395 vulnerability: the application depends on PostgreSQL v10.x which contains multiple unpatched CVEs. Remote attackers can exploit these known vulnerabilities in the PostgreSQL backend to achieve privilege escalation, arbitrary code execution, or denial-of-service without requiring local access. Upgrading to PostgreSQL 17.4 eliminates the vulnerable components.
In the same product, most dangerous first.