CVE-2024-28589: Axigen Mail Server

Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days.

An issue was discovered in Axigen Mail Server for Windows versions 10.5.18 and before, allows local low-privileged attackers to execute arbitrary code and escalate privileges via insecure DLL loading from a world-writable directory during service initialization.

Affected products

• Axigen Axigen Mail Server: up to and including 10.5.18

Published 2024-04-03. Last modified 2026-06-17.