What is the CVSS score of CVE-2025-59784?

CVE-2025-59784 has a CVSS 3.1 base score of 7.2 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Access Commander are affected by CVE-2025-59784?

2N Access Commander versions 3.4.1 and earlier contain a log pollution vulnerability that allows attackers to inject malicious content into system logs without validation.

How to fix or mitigate CVE-2025-59784?

Within 24 hours: Inventory all 2N Access Commander deployments and document versions in use. Within 7 days: Implement enhanced log monitoring to detect anomalous log entries and restrict API access to trusted sources via network segmentation or firewall rules. Within 30 days: Evaluate vendor updates and apply patches immediately when available; consider upgrading to patched versions or implementing compensating controls if upgrade timelines are delayed.

Access Commander CVE-2025-59784

HIGH

Improper Output Neutralization for Logs (CWE-117)

2026-03-04 be69f613-e5f6-419b-800c-30351aa8933c

Information Disclosure Access Commander

7.2

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.2 HIGH

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:05 vuln.today

CVE Published

Mar 04, 2026 - 16:16 nvd

HIGH 7.2

DescriptionCVE.org

2N Access Commander version 3.4.1 and prior is vulnerable to log pollution. Certain parameters sent over API may be included in the logs without prior validation or sanitisation. This vulnerability can only be exploited after authenticating with administrator privileges.

AnalysisAI

2N Access Commander version 3.4.1 and prior is vulnerable to log pollution. Certain parameters sent over API may be included in the logs without prior validation or sanitisation. [CVSS 7.2 HIGH]

Technical ContextAI

Affects Access Commander. 2N Access Commander version 3.4.1 and prior is vulnerable to log pollution. Certain parameters sent over API may be included in the logs without prior validation or sanitisation. This vulnerability can only be exploited after authenticating with administrator privileges.