VYPR
Unrated severityNVD Advisory· Published Mar 4, 2026· Updated Mar 4, 2026

Cookies are not Invalidated upon Logout and Password Change

CVE-2025-59786

Description

2N Access Commander version 3.4.2 and prior improperly invalidates session tokens, allowing multiple session cookies to remain active after logout in web application.

Affected products

1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.