CVE-2026-12593: Axivion 7.8.5 through 7.8.12, 7.9.0 to before 7.9.13, 7.10.0 to before 7.10.11, 7.11.0 to before 7.11.7, 7.12.0 to…

Affected technology

Axivion · 7.8.5 through 7.8.12, 7.9.0 to before 7.9.13, 7.10.0 to before 7.10.11, 7.11.0 to before 7.11.7, 7.12.0 to before 7.12.2
Qt

Component: Dashboard OIDC/OAuth2/SSO subsystem

Attack conditions (Source advisory, CVSS 4.0): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

This would mean an attacker could have become Dashboard Administrator and been able to perform all administrative actions if the preexisting internal user had administrative privileges. Source advisory’s CVSS 4.0 assessment (base score 8.7/10) rates confidentiality, integrity and availability impact as high.