PT-2026-22932 · 2N · 2N Access Commander

CVE-2025-59785 · Publicado 2026-03-04 · Atualizado 2026-03-05

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions 2N Access Commander versions prior to 3.4.3

Description A flaw exists in the validation of an API endpoint in 2N Access Commander that could allow an attacker to bypass the password policy for backup file encryption. Successful exploitation requires administrator privileges.

Recommendations Update 2N Access Commander to a version later than 3.4.2.

Correção

Enumeração de Fraquezas

CWE-1286

Identificadores relacionados

CVE-2025-59785

Produtos afetados

2N Access Commander

Referências · 9

• https://twitter.com/infoflowcloud/status/2029273355199684827 · Publicação no Twitter
• https://2n.com/en-GB/download/cve_2025_59785_acom_3_5_v1pdf · Aviso do Fabricante
• https://twitter.com/cyberbivash/status/2029234534139506931 · Publicação no Twitter
• https://twitter.com/threatcluster/status/2029618191182283172 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-59785 · Nota de Segurança
• https://t.me/cveNotify/154334 · Publicação no Telegram
• https://twitter.com/VulmonFeeds/status/2029249322538143990 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2029272849144217683 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2025-59785 · Aviso do Fabricante