Axivion vulnerabilities

1 known vulnerability in Axivion from Qt. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  Axivion: Missing Authorization

  CVE-2026-12593Jul 9, 2026Qt

  The implementation of an internal and undocumented Dashboard API endpoint (POST /api/users/~/{user}/tokens) forgot to ensure an HTTP request for creating an API Token for another user had sufficient permission to do so. Precondition for successful exploitation