AC
Product
Access Commander
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 6Medium 1Low 0
Watch
Add Access Commander to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-59786 | 9.8 | Mar 4 | Cookies are not Invalidated upon Logout and Password Change Affected: before 3.5 |
| CVE-2024-47255 | 7.8 | Nov 5 | In 2N Access Commander versions 3.1.1.2 and prior, a local attacker can escalate their privileges in the system which could allow for arbitrary code execution with root… Affected: through 3.1.1.2 |
| CVE-2025-59785 | 7.2 | Mar 4 | API - Insufficient Input Validation Affected: before 3.5 |
| CVE-2025-59784 | 7.2 | Mar 4 | Log Pollution - Control Characters Not Escaped Affected: before 3.4.2 |
| CVE-2025-59783 | 7.2 | Mar 4 | OS Command Injection over API Affected: before 3.4.2 |
| CVE-2024-47254 | 7.2 | Nov 5 | In 2N Access Commander versions 3.1.1.2 and prior, an Insufficient Verification of Data Authenticity vulnerability could allow an attacker to escalate their privileges and gain… Affected: through 3.1.1.2 |
| CVE-2024-47253 | 7.2 | Nov 5 | In 2N Access Commander versions 3.1.1.2 and prior, a Path Traversal vulnerability could allow an attacker with administrative privileges to write files on the filesystem and… Affected: through 3.1.1.2 |
| CVE-2025-59787 | 6.5 | Mar 4 | HTTP 5XX Internal Server Errors Affected: before 3.5 |
Showing 8