Security Advisory

CVE-2025-68721

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-02-05 00:00:00

Last updated 2026-02-13 14:26:38

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Axigen Mail Server before 10.5.57 contains an improper access control vulnerability in the WebAdmin interface. A delegated admin account with zero permissions can bypass access control checks and gain unauthorized access to the SSL Certificates management endpoint (page=sslcerts). This allows the attacker to view, download, upload, and delete SSL certificate files, despite lacking the necessary privileges to access the Security & Filtering section.

← Browse all CVEs View on cve.org ↗