Critical Vulnerabilities Found in 2N Access Commander API
First seen 5 Mar 2026, 17:11 UTC
•
•63.8
Export
Article Content
Browse articles
Two vulnerabilities have been identified in the 2N Access Commander software, versions 3.4.1 and 3.4.2. CVE-2025-59783 allows OS command injection through an insufficiently validated API endpoint, while CVE-2025-59785 enables bypassing password policies for backup file encryption, both requiring administrator authentication for exploitation.
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Timeline
2026-03-04
CVE-2025-59783 published
2026-03-04
CVE-2025-59785 published
2026-03-05
Articles published detailing vulnerabilities
More articles in this cluster
Continue Reading
Critical Joomla JCE Vulnerability Under Active Exploitation
Critical Zero-Day Vulnerability CVE-2026-20182 Exploited in Cisco SD-WAN Systems
Critical SonicWall SMA1000 Vulnerabilities Under Active Exploitation
CVE-2026-47668: Unauthenticated RCE Vulnerability in DbGate
Critical Zero-Day Vulnerability in LiteSpeed cPanel Plugin Actively Exploited
Critical Unauthenticated RCE Vulnerability in LiteLLM Exploited in the Wild