Back Nvd.Nist

CVE-2025-59783 Detail

Nvd.Nist • March 5, 2026

API endpoint for user synchronization in 2N Access Commander version 3.4.1 did not have a sufficient input validation allowing for OS command injection. This vulnerability can only be exploited after authenticating with administrator privileges.

Denotes Vulnerable Software Are we missing a CPE here? Please let us know .

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities Found in 2N Access Commander API Two vulnerabilities have been identified in the 2N Access Commander software, versions 3.4.1 and 3.4.2. CVE-2025-59783 allows OS command injection through an insufficiently validated API endpoint, while CVE-2025-59785 enables bypassing password policies for backup file encryption, both requiring administrator authentication for exploitation. 4 sources 64

Extracted Entities

CVE-2025-59783 Detail

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

MITRE ATT&CK (1)

Platforms (1)