CVE-2025-59783 — OS Command Injection over API

CVE-2025-59783

OS Command Injection over API PUBLISHED

Description (CNA)

API endpoint for user synchronization in 2N Access Commander version 3.4.1 did not have a sufficient input validation allowing for OS command injection. This vulnerability can only be exploited after authenticating with administrator privileges.

Affected (CNA)

Vendor / product	Versions
2N Telekomunikace a.s. / 2N Access Commander	affected 0 before 3.4.2

CWE

CWE-78

References

https://www.2n.com/en-GB/download/cve_2025_59783_acom_3_5_v1pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.