Browse CVEs

CRITICAL 9.8 CVE-2025-59786 2N Access Commander version 3.4.2 and prior improperly invalidates session tokens, allowing multiple session cookies to remain active after logout in… Access Commander 3.5+ Fix from $2,3002026-03-04 HIGH 7.2 CVE-2025-59784 2N Access Commander version 3.4.1 and prior is vulnerable to log pollution. Certain parameters sent over API may be included in the logs without prio… Access Commander 3.4.2+ Fix from $1,9502026-03-04 HIGH 7.2 CVE-2025-59785 Improper validation of API end-point in 2N Access Commander version 3.4.2 and prior allows attacker to bypass password policy for backup file encrypt… Access Commander 3.5+ Fix from $1,9502026-03-04 MEDIUM 6.5 CVE-2025-59787 2N Access Commander application version 3.4.2 and prior returns HTTP 500 Internal Server Error responses when receiving malformed or manipulated requ… Access Commander 3.5+ Fix from $1,6002026-03-04 HIGH 7.2 CVE-2025-59783 API endpoint for user synchronization in 2N Access Commander version 3.4.1 did not have a sufficient input validation allowing for OS command injecti… Access Commander 3.4.2+ Fix from $1,9502026-03-04 HIGH 7.8 CVE-2024-47255 In 2N Access Commander versions 3.1.1.2 and prior, a local attacker can escalate their privileges in the system which could allow for arbitrary code… Access Commander after 3.1.1.2 Fix from $1,9502024-11-05 HIGH 7.2 CVE-2024-47254 In 2N Access Commander versions 3.1.1.2 and prior, an Insufficient Verification of Data Authenticity vulnerability could allow an attacker to escal… Access Commander after 3.1.1.2 Fix from $1,9502024-11-05 HIGH 7.2 CVE-2024-47253 In 2N Access Commander versions 3.1.1.2 and prior, a Path Traversal vulnerability could allow an attacker with administrative privileges to write fil… Access Commander after 3.1.1.2 Fix from $1,9502024-11-05 MEDIUM 5.9 CVE-2021-31399 On 2N Access Unit 2.0 2.31.0.40.5 devices, an attacker can pose as the web relay for a man-in-the-middle attack. Access Unit 2.0 Firmware No fix yet Fix from $1,6002021-08-13