2N: CVE Program partner

CVEs, 365 days55 all time, 0 rejected

Quality100%median 99%

CVSS by the CNA100%share of records

CWE100%share of records

Affected versions100%not n/a or unspecified

CVSS added by CISA0%lower is better

Organisation	2N Telekomunikace a.s.
Role	CNA
Type	Vendor
Reports to	mitre
Scope	All products of 2N Telekomunikace a.s. including end-of-life/end-of-service products.
Advisories	https://www.2n.com/en-GB/about-2n/cybersecurity/security-advisories

CVE-2025-59787 2026-03-04 · CVSS 5.3
2N Access Commander application version 3.4.2 and prior returns HTTP 500 Internal Server Error responses when receiving malformed or manipulated requests, indic
CVE-2025-59786 2026-03-04 · CVSS 6.0
2N Access Commander version 3.4.2 and prior improperly invalidates session tokens, allowing multiple session cookies to remain active after logout in web applic
CVE-2025-59785 2026-03-04 · CVSS 5.3
Improper validation of API end-point in 2N Access Commander version 3.4.2 and prior allows attacker to bypass password policy for backup file encryption. This v
CVE-2025-59784 2026-03-04 · CVSS 6.9
2N Access Commander version 3.4.1 and prior is vulnerable to log pollution. Certain parameters sent over API may be included in the logs without prior validatio
CVE-2025-59783 2026-03-04 · CVSS 8.8
API endpoint for user synchronization in 2N Access Commander version 3.4.1 did not have a sufficient input validation allowing for OS command injection. This v

2N