CVE Feed

    Dashboard / CVE / CVE-2025-59786

    CVE-2025-59786

    2N Access Commander version 3.4.2 and prior improperly invalidates session tokens, allowing multiple session cookies to remain active after logout in web application.

    Published:Mar 4, 2026
    Last Modified:Mar 5, 2026
    EPS:Mar 4, 2026
    EPSS Score:0.00041
    CVSS Score:9.8

    Affected Products

    Vendor
    2n
    Product
    Access Commander

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-613 Insufficient Session Expiration

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2025-59787 (CVSS 5.3) — 2N Access Commander application version 3.4.2 and prior returns HTTP 500 Internal Server Error responses when …
    CVE-2025-59785 (CVSS 5.3) — Improper validation of API end-point in 2N Access Commander version 3.4.2 and prior allows attacker to bypass …
    CVE-2025-59784 (CVSS 6.9) — 2N Access Commander version 3.4.1 and prior is vulnerable to log pollution. Certain parameters sent over API m…
    CVE-2025-59783 (CVSS 8.8) — API endpoint for user synchronization in 2N Access Commander version 3.4.1 did not have a sufficient input val…
    CVE-2024-47255 (CVSS 4.7) — In 2N Access Commander versions 3.1.1.2 and prior, a local attacker can escalate their privileges in the syste…
    CVE-2024-47254 (CVSS 6.3) — In 2N Access Commander versions 3.1.1.2 and prior, an Insufficient Verification of Data Authenticity vulnerab…
    CVE-2024-47253 (CVSS 7.2) — In 2N Access Commander versions 3.1.1.2 and prior, a Path Traversal vulnerability could allow an attacker with…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High