Critical severity9.8NVD Advisory· Published Mar 4, 2026· Updated Jun 17, 2026

CVE-2025-59786

Description

2N Access Commander version 3.4.2 and prior improperly invalidates session tokens, allowing multiple session cookies to remain active after logout in web application.

Affected products

2n Telekomunikace A.s./2n Access Commanderv5
Range: 0

Patches

Vulnerability mechanics

References

www.2n.com/en-GB/download/cve_2025_59786_acom_3_5_v1pdfnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000