PatchTheCVECVE-2025-59787: 2N Access Commander application version 3.4.2 and prior returns HTTP 500 Internal Server Error responses when
CVE-2025-59787 is a medium-severity flaw (CVSS 6.5) affecting access commander. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
2N Access Commander application version 3.4.2 and prior returns HTTP 500 Internal Server Error responses when receiving malformed or manipulated requests, indicating improper handling of invalid input and potential security or availability impacts.
Why this priority
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 6.5 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.2% (top 90%) |
| CISA exploited list | No |
| Weakness | CWE-703 |
| Published | 2026-03-04 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2025-59787?
access commander: upgrade to 3.5. Exact commands for each OS are on this page.
Is CVE-2025-59787 being exploited?
CVE-2025-59787 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2025-59787 affect?
CVE-2025-59787 affects access commander. Severity is medium (CVSS 6.5). 2N Access Commander application version 3.4.2 and prior returns HTTP 500 Internal Server Error responses when receiving malformed or manipulated requests, indicating improper handling of invalid input and potential security or availability
How urgent is CVE-2025-59787?
Priority 30/100. Remotely exploitable, no login, no user action
Related CVEs
- CVE-2025-59786 CRITICAL 9.8 UPGRADE 2N Access Commander version 3.4.2 and prior improperly invalidates session tokens, allowing multiple session c
- CVE-2025-59785 HIGH 7.2 UPGRADE Improper validation of API end-point in 2N Access Commander version 3.4.2 and prior allows attacker to bypass
- CVE-2025-59784 HIGH 7.2 UPGRADE 2N Access Commander version 3.4.1 and prior is vulnerable to log pollution
- CVE-2025-59783 HIGH 7.2 UPGRADE API endpoint for user synchronization in 2N Access Commander version 3.4.1 did not have a sufficient input val
- CVE-2024-47255 MEDIUM 4.7 UPGRADE In 2N Access Commander versions 3.1.1.2 and prior, a local attacker can escalate their privileges in the syste