CVE-2025-59785CWE-1286

API - Insufficient Input Validation

Medium · published March 4, 2026

CVSS v4.0
5.3
EPSS
0%
Percentile
8.4
In the wild
Unconfirmed
What it is

Improper validation of API end-point in 2N Access Commander version 3.4.2 and prior allows attacker to bypass password policy for backup file encryption.

This vulnerability can only be exploited after authenticating with administrator privileges.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N
EPSS
0.00193 · 8.4th percentile
Weakness
CWE-1286 · Improper Validation of Syntactic Correctness of Input
Published
2026-03-04T15:30Z
EPSS history
Timeline
  • 04 MAR 15:30Z
    API - Insufficient Input Validation
    cvelistv5