CVE-2025-59784
Log Pollution - Control Characters Not Escaped
- State
- Published
- Severity
- 6.9 Medium
- Published
- Mar 4, 2026
- Updated
- Mar 4, 2026
- Reserved
- Sep 19, 2025
Description
2N Access Commander version 3.4.1 and prior is vulnerable to log pollution. Certain parameters sent over API may be included in the logs without prior validation or sanitisation. This vulnerability can only be exploited after authenticating with administrator privileges.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.9 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N | 2N |
Weaknesses
- CWE-117 Improper Output Neutralization for Logs
Affected Products
| Product | Versions |
|---|---|
2N Access Commander2N Telekomunikace a.s. |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.