2n Telekomunikace A.s. 2n Access Commander
5 CVEs affecting 2n Telekomunikace A.s. 2n Access Commander. Latest disclosed: 2026-03-04. Critical: 1, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-59786 | Critical | 9.8 | 2026-03-04 | 2N Access Commander version 3.4.2 and prior improperly invalidates session tokens, allowing multiple session cookies to remain active after logout in web appli… |
CVE-2025-59785 | High | 7.2 | 2026-03-04 | Improper validation of API end-point in 2N Access Commander version 3.4.2 and prior allows attacker to bypass password policy for backup file encryption. This… |
CVE-2025-59784 | High | 7.2 | 2026-03-04 | 2N Access Commander version 3.4.1 and prior is vulnerable to log pollution. Certain parameters sent over API may be included in the logs without prior validati… |
CVE-2025-59783 | High | 7.2 | 2026-03-04 | API endpoint for user synchronization in 2N Access Commander version 3.4.1 did not have a sufficient input validation allowing for OS command injection. This… |
CVE-2025-59787 | Medium | 6.5 | 2026-03-04 | 2N Access Commander application version 3.4.2 and prior returns HTTP 500 Internal Server Error responses when receiving malformed or manipulated requests, indi… |