Description

Axigen Mail Server before 10.5.57 contains an improper access control vulnerability in the WebAdmin interface. A delegated admin account with zero permissions can bypass access control checks and gain unauthorized access to the SSL Certificates management endpoint (page=sslcerts). This allows the attacker to view, download, upload, and delete SSL certificate files, despite lacking the necessary privileges to access the Security & Filtering section.

INFO

Published Date :

2026-02-05T00:00:00.000Z

Last Modified :

2026-02-13T14:26:38.750Z

Source :

mitre
AFFECTED PRODUCTS

The following products are affected by CVE-2025-68721 vulnerability.

Vendors Products
Axigen
  • Axigen Mail Server
  • Mail Server
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-68721.

URL Resource
https://github.com/osmancanvural/CVE-2025-68721 cve-icon cve-icon
https://www.axigen.com/knowledgebase/Axigen-WebAdmin-Improper-Access-Control-Vulnerability-CVE-2025-68721-_406.html cve-icon cve-icon
https://www.axigen.com/mail-server/download/ cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact