CVE-2025-10226: PostgreSQL Upgrade from v10 to v17.4 in AxxonSoft Axxon One (C-Werk) 2.0.8 and earlier to Address Multiple Vulnerabilities
Dependency on Vulnerable Third-Party Component (CWE-1395) in the PostgreSQL backend in AxxonSoft Axxon One (C-Werk) 2.0.8 and earlier on Windows and Linux allows a remote attacker to escalate privileges, execute arbitrary code, or cause denial-of-service via exploitation of multiple known CVEs present in PostgreSQL v10.x, which are resolved in PostgreSQL 17.4.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10226?
CVE-2025-10226 has a high severity due to its potential to allow remote code execution and privilege escalation.
How do I fix CVE-2025-10226?
To fix CVE-2025-10226, update AxxonSoft Axxon One to a version later than 2.0.8 and ensure that the PostgreSQL component is updated to a secure version.
What systems are affected by CVE-2025-10226?
CVE-2025-10226 affects AxxonSoft Axxon One versions up to 2.0.8 and PostgreSQL from version 10.0 to 17.4.
What type of attacks can CVE-2025-10226 facilitate?
CVE-2025-10226 can facilitate remote code execution, privilege escalation, and denial-of-service attacks.
Who is responsible for addressing CVE-2025-10226?
Users of AxxonSoft Axxon One and affected PostgreSQL versions are responsible for applying the necessary updates to mitigate CVE-2025-10226.