CVE-2025-59784 Log Pollution - Control Characters Not Escaped

What is CVE-2025-59784?

CVE-2025-59784 is a medium-severity vulnerability in 2N Access Commander, published on 4 Mar 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

2N Access Commander version 3.4.1 and prior is vulnerable to log pollution. Certain parameters sent over API may be included in the logs without prior validation or sanitisation. This vulnerability can only be exploited after authenticating with administrator privileges.

Weakness: CWE-117

Which versions are affected by CVE-2025-59784?

It affects 1 product.

Products include 2n Access Commander.

How do I fix CVE-2025-59784?

No fix has been published for CVE-2025-59784 yet. Limit exposure of the affected software until one is available.

Is CVE-2025-59784 being exploited?

There is no known exploitation of CVE-2025-59784 in the wild and no public exploit code.

Other vulnerabilities in 2N Access Commander

• CVE-2025-59783 OS Command Injection over API High 8.8
• CVE-2024-47253 Path traversal in 2N Access Commander High 7.2
• CVE-2024-47254 Privilege escalation in 2N Access Commander Medium 6.3
• CVE-2025-59786 Cookies are not Invalidated upon Logout and Password Change Medium 6.0
• CVE-2025-59785 API - Insufficient Input Validation Medium 5.3

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-whr8-xqgw-9f74.