CVE-2021-37440: Nch Axon Pbx

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

NCH Axon PBX v2.22 and earlier allows path traversal for file disclosure via the logprop?file=/.. substring.

Affected products

• Nch Axon Pbx: up to and including 2.22

Published 2021-07-25. Last modified 2026-06-17.