What is the CVSS score of CVE-2025-59785?

CVE-2025-59785 has a CVSS 3.1 base score of 7.2 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Access Commander are affected by CVE-2025-59785?

CVE-2025-59785 affects Access Commander, allowing attackers to circumvent password policies protecting backup file encryption.

How to fix or mitigate CVE-2025-59785?

Within 24 hours: Identify all Access Commander instances and backup locations; disable backup encryption feature if operationally feasible or restrict access to backup files via network controls. Within 7 days: Audit recent backup files for unauthorized access attempts; implement mandatory strong encryption outside of Access Commander (separate encryption layer); restrict Access Commander admin access to trusted networks only. Within 30 days: Evaluate alternative backup solutions with verified encryption implementations; develop migration plan away from affected Access Commander version; conduct full backup integrity assessment.

Access Commander CVE-2025-59785

HIGH

Improper Validation of Syntactic Correctness of Input (CWE-1286)

2026-03-04 be69f613-e5f6-419b-800c-30351aa8933c

Authentication Bypass Access Commander

7.2

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.2 HIGH

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:05 vuln.today

CVE Published

Mar 04, 2026 - 16:16 nvd

HIGH 7.2

DescriptionCVE.org

Improper validation of API end-point in 2N Access Commander version 3.4.2 and prior allows attacker to bypass password policy for backup file encryption. This vulnerability can only be exploited after authenticating with administrator privileges.

AnalysisAI

Access Commander contains a vulnerability that allows attackers to bypass password policy for backup file encryption (CVSS 7.2).

Technical ContextAI

affects Access Commander. Improper validation of API end-point in 2N Access Commander version 3.4.2 and prior allows attacker to bypass password policy for backup file encryption. This vulnerability can only be exploited after authenticating with administrator privileges.