Unrated severityNVD Advisory· Published Mar 4, 2026· Updated Mar 4, 2026
OS Command Injection over API
CVE-2025-59783
Description
API endpoint for user synchronization in 2N Access Commander version 3.4.1 did not have a sufficient input validation allowing for OS command injection. This vulnerability can only be exploited after authenticating with administrator privileges.
Affected products
1- Range: 0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- www.2n.com/en-GB/download/cve_2025_59783_acom_3_5_v1pdfmitrevendor-advisory
News mentions
0No linked articles in our index yet.