Skip to main content

Access Commander CVE-2025-59783

HIGH
OS Command Injection (CWE-78)
2026-03-04 be69f613-e5f6-419b-800c-30351aa8933c
Command Injection Access Commander 2N
7.2
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.2 HIGH
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

2
Analysis Generated
Mar 12, 2026 - 22:05 vuln.today
CVE Published
Mar 04, 2026 - 16:16 nvd
HIGH 7.2

DescriptionCVE.org

API endpoint for user synchronization in 2N Access Commander version 3.4.1 did not have a sufficient input validation allowing for OS command injection. This vulnerability can only be exploited after authenticating with administrator privileges.

AnalysisAI

API endpoint for user synchronization in 2N Access Commander version 3.4.1 did not have a sufficient input validation allowing for OS command injection. This vulnerability can only be exploited after authenticating with administrator privileges. [CVSS 7.2 HIGH]

Technical ContextAI

Classified as CWE-78 (OS Command Injection). Affects Access Commander. API endpoint for user synchronization in 2N Access Commander version 3.4.1 did not have a sufficient input validation allowing for OS command injection. This vulnerability can only be exploited after authenticating with administrator privileges.

RemediationAI

Monitor vendor advisories for a patch. Restrict network access to the affected service where possible.

More in Access Commander

View all
CVE-2025-59786 CRITICAL
9.8 Mar 04

Insufficient session invalidation in 2N Access Commander 3.4.2. Multiple sessions remain valid after logout.
CVE-2024-47255 HIGH
7.8 Nov 05

In 2N Access Commander versions 3.1.1.2 and prior, a local attacker can escalate their privileges in the system which co
CVE-2025-59784 HIGH
7.2 Mar 04

2N Access Commander version 3.4.1 and prior is vulnerable to log pollution. Certain parameters sent over API may be incl
CVE-2025-59785 HIGH
7.2 Mar 04

Access Commander contains a vulnerability that allows attackers to bypass password policy for backup file encryption (CV
CVE-2024-47254 HIGH
7.2 Nov 05

In 2N Access Commander versions 3.1.1.2 and prior, an Insufficient Verification of Data Authenticity vulnerability could
CVE-2024-47253 HIGH
7.2 Nov 05

In 2N Access Commander versions 3.1.1.2 and prior, a Path Traversal vulnerability could allow an attacker with administr
CVE-2025-59787 MEDIUM
6.5 Mar 04

2N Access Commander application version 3.4.2 and prior returns HTTP 500 Internal Server Error responses when receiving

Same weakness CWE-78 – OS Command Injection

View all
CVE-2019-15107 CRITICAL POC
9.8
CVE-2024-51378 CRITICAL POC
9.8
CVE-2014-6271 CRITICAL POC
9.8
CVE-2018-11138 CRITICAL POC
9.8
CVE-2014-6278 HIGH POC
8.8
CVE-2017-6334 HIGH POC
8.8
CVE-2024-50603 CRITICAL POC
10.0
CVE-2024-9474 MEDIUM POC
6.9

Same technique Command Injection

View all
CVE-2024-21887 CRITICAL POC
9.1
CVE-2019-15107 CRITICAL POC
9.8
CVE-2024-51378 CRITICAL POC
9.8
CVE-2012-1823 CRITICAL POC
9.8
CVE-2016-1555 CRITICAL POC
9.8
CVE-2014-6271 CRITICAL POC
9.8
CVE-2024-55956 CRITICAL POC
9.8
CVE-2018-11138 CRITICAL POC
9.8

Share

CVE-2025-59783 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy