CVE-2020-26942

—

CVSS 3.1

9.1 critical

EPSS

<1%p38

Published

Mar 21, 2024 (Mar 21, 2024)

Modified

Jun 17, 2026

Description

An issue discovered in Axigen Mail Server 10.3.x before 10.3.1.27 and 10.3.2.x before 10.3.3.1 allows unauthenticated attackers to submit a setAdminPassword operation request, subsequently setting a new arbitrary password for the admin account.

Vendors: axigen
Products: axigen mail server
Weakness: CWE-306, CWE-284
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.