CVE-2025-10226 Supply chain in AxxonOne C-Werk
Remote attackers can exploit vulnerable bundled PostgreSQL versions to execute code, escalate privileges, or cause denial of service in Axxon One.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-10226?
CVE-2025-10226 is a critical vulnerability in AxxonSoft AxxonOne C-Werk, published on 10 Sep 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Dependency on Vulnerable Third-Party Component (CWE-1395) in the PostgreSQL backend in AxxonSoft Axxon One (C-Werk) 2.0.8 and earlier on Windows and Linux allows a remote attacker to escalate privileges, execute arbitrary code, or cause denial-of-service via exploitation of multiple known CVEs present in PostgreSQL v10.x, which are resolved in PostgreSQL 17.4.
Weakness: CWE-1395
Which versions are affected by CVE-2025-10226?
It affects 1 product.
Products include Axxonsoft Axxon One.
How do I fix CVE-2025-10226?
No fix has been published for CVE-2025-10226 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-10226 being exploited?
There is no known exploitation of CVE-2025-10226 in the wild and no public exploit code.
Other vulnerabilities in AxxonSoft AxxonOne C-Werk
- CVE-2025-10220 Outdated Third-Party NuGet Packages in AxxonSoft Axxon One VMS 2.0.0 through 2.0.4
- CVE-2025-10225 Incorrect Memory Allocation in OpenSSL-Based Session Module in AxxonSoft Axxon One (C-Werk)
- CVE-2025-10221 Hardcoded Password Exposure in AxxonNet (C-WerkNet) ARP Agent Logs
- CVE-2025-10223 Improper Session Cleanup on Role Removal in Web Admin Panel in AxxonSoft Axxon One (C-Werk)
- CVE-2025-10224 Incorrect Evaluation of LDAP Nested Groups during Login in AxxonSoft Axxon One (C-Werk)
Sources
Also known as GHSA-xfrw-g4q5-m2f8.