PT-2026-22932 · 2N · 2N Access Commander

Published 2026-03-04 · Updated 2026-03-05 · CVE-2025-59785

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions 2N Access Commander versions prior to 3.4.3

Description A flaw exists in the validation of an API endpoint in 2N Access Commander that could allow an attacker to bypass the password policy for backup file encryption. Successful exploitation requires administrator privileges.

Recommendations Update 2N Access Commander to a version later than 3.4.2.

Fix

Weakness Enumeration

CWE-1286

Related Identifiers

CVE-2025-59785

Affected Products

2N Access Commander

References · 9

• https://2n.com/en-GB/download/cve_2025_59785_acom_3_5_v1pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-59785 · Security Note
• https://osv.dev/vulnerability/CVE-2025-59785 · Vendor Advisory
• https://twitter.com/infoflowcloud/status/2029273355199684827 · Twitter Post
• https://twitter.com/cyberbivash/status/2029234534139506931 · Twitter Post
• https://twitter.com/threatcluster/status/2029618191182283172 · Twitter Post
• https://t.me/cveNotify/154334 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2029249322538143990 · Twitter Post
• https://twitter.com/CVEnew/status/2029272849144217683 · Twitter Post