CVE-2025-59785
API - Insufficient Input Validation
- State
- Published
- Severity
- 5.3 Medium
- Published
- Mar 4, 2026
- Updated
- Mar 4, 2026
- Reserved
- Sep 19, 2025
Description
Improper validation of API end-point in 2N Access Commander version 3.4.2 and prior allows attacker to bypass password policy for backup file encryption. This vulnerability can only be exploited after authenticating with administrator privileges.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.3 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N | 2N |
Weaknesses
- CWE-1286 – Improper Validation of Syntactic Correctness
Affected Products
| Product | Versions |
|---|---|
2N Access Commander2N Telekomunikace a.s. |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.