VULNERABILITY INTELLIGENCE

CVE-2025-59785

CVSS score7.2 HIGH
EPSS probability0.21%
CISA KEVNot currently listed
Published2026-03-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

Improper validation of API end-point in 2N Access Commander version 3.4.2 and prior allows attacker to bypass password policy for backup file encryption. This vulnerability can only be exploited after authenticating with administrator privileges.

Weakness classification

  • be69f613-e5f6-419b-800c-30351aa8933c: CWE-1286

Primary references