AxxonSoft AxxonNet allows a remote attacker who possesses a shared report token, which is intended for read‑only access, to create, modify or delete monitoring alerts via its monitoring API. The flaw originates from incorrect authorization controls. The primary impact is that an attacker can alter the alerting configuration, potentially leading to missed incidents or false alarms, thereby affecting the availability and integrity of the system’s monitoring capabilities.

All installations of AxxonSoft AxxonNet running on Linux with a version prior to 3.28.0 are impacted. The vulnerability resides in the health monitoring service component of the product.

The CVSS score of 5.3 indicates a moderate severity. No EPSS score is available and the vulnerability is not listed in CISA’s KEV catalog, suggesting that there are currently no widely known or actively exploited instances. The attack requires a remote attacker to obtain a shared report token, which could be facilitated by misuse or compromise of the token distribution process. Once the token is in hand, the attacker can exercise full control over monitoring alerts via the exposed API, without needing additional privileges.