CVE-2026-12593 | Qt Axivion up to 7.12.1 API endpoint /api/users token User permission

SecurityVulns
Yanac

A vulnerability described as critical has been identified in Qt Axivion up to 7.8.12/7.9.12/7.10.10/7.11.6/7.12.1. Affected is the function token of the file /api/users of the component API endpoint. Executing a manipulation of the argument User can lead to permission issues.

This vulnerability is registered as CVE-2026-12593. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More