CVE-2025-59784mediumCWE-117

CVE-2025-59784: medium-severity vulnerability in 2N Access Commander

Log Pollution - Control Characters Not Escaped

Published

Follow this CVE+ Monitor 2N Access Commander

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.9epss 0.3%
2N Access Commander version 3.4.1 and prior is vulnerable to log pollution. Certain parameters sent over API may be included in the logs without prior validation or sanitisation. This vulnerability can only be exploited after authenticating with administrator privileges.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Affected products
2N Telekomunikace a.s. · 2N Access Commander
Related CVEs — 2N Access Commander

In the same product, most dangerous first.

CVE-2025-59783HIGHOS Command Injection over APIEPSS 1.0%CVE-2025-59786MEDIUMCookies are not Invalidated upon Logout and Password ChangeEPSS 0.3%CVE-2025-59787MEDIUMHTTP 5XX Internal Server ErrorsEPSS 0.2%CVE-2025-59785MEDIUMAPI - Insufficient Input ValidationEPSS 0.2%