{"id":"CVE-2025-59784","url":"https://www.cyber-defence.io/tools/cve/CVE-2025-59784","generatedAt":"2026-10-28T04:11:27.780Z","title":"2N Access Commander version 3.4.1 and prior is vulnerable to log pollution.","description":"2N Access Commander version 3.4.1 and prior is vulnerable to log pollution. Certain parameters sent over API may be included in the logs without prior validation or sanitisation.\nThis vulnerability can only be exploited after authenticating with administrator privileges.","published":"2026-03-04T16:16:25.000Z","lastModified":"2026-06-17T09:46:43.000Z","status":"Analyzed","sourceIdentifier":"be69f613-e5f6-419b-800c-30351aa8933c","cvss":{"version":"4.0","score":6.9,"severity":"MEDIUM","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-117"],"affected":["2n/access commander"],"epss":{"score":0.00298,"percentile":0.22312,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.30%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://www.2n.com/en-GB/download/cve_2025_59784_acom_3_5_v1pdf","tags":["Vendor Advisory"],"source":"be69f613-e5f6-419b-800c-30351aa8933c"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-59784","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}