CVE-2025-59785

5.3 mediumEPSS 0.2%

Medium (5.3) in 2n access commander. EPSS 0.2% chance of exploitation in the next 30 days.

Improper validation of API end-point in 2N Access Commander version 3.4.2 and prior allows attacker to bypass password policy for backup file encryption. This vulnerability can only be exploited after authenticating with administrator privileges.

Severity

CVSS 4.0

5.3 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 10% of CVEs (scores of 2026-10-31)
CWE: CWE-1286
Published: 2026-03-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

2n:access_commander

References

https://www.2n.com/en-GB/download/cve_2025_59785_acom_3_5_v1pdf

Check your stack JSON