Exploitation Summary
EIP tracks 2 public exploits for CVE-2025-68721. PoCs published by XiaomingX, osmancanvural.
AI-analyzed exploit summary The repository provides a detailed technical analysis of CVE-2025-68721, an improper access control vulnerability in Axigen WebAdmin. It describes how an admin account with no permissions can access the SSL Certificates endpoint, allowing unauthorized certificate management.
Description
Axigen Mail Server before 10.5.57 contains an improper access control vulnerability in the WebAdmin interface. A delegated admin account with zero permissions can bypass access control checks and gain unauthorized access to the SSL Certificates management endpoint (page=sslcerts). This allows the attacker to view, download, upload, and delete SSL certificate files, despite lacking the necessary privileges to access the Security & Filtering section.
Exploits (2)
The repository provides a detailed technical analysis of CVE-2025-68721, an improper access control vulnerability in Axigen WebAdmin. It describes how an admin account with no permissions can access the SSL Certificates endpoint, allowing unauthorized certificate management.
The repository provides a detailed technical analysis of CVE-2025-68721, an improper access control vulnerability in Axigen WebAdmin. It describes how an admin account with zero permissions can access the SSL Certificates endpoint, leading to unauthorized certificate management.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N