<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="rss.xsl"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>2N Telekomunikace a.s. — recent CVEs</title>
    <link>https://vulnogram.org/</link>
    <atom:link href="https://vulnogram.org/rss/2n" rel="self" type="application/rss+xml"/>
    <description>Most recent CVEs assigned by 2N Telekomunikace a.s. (2n).</description>
    <image>
      <url>https://vulnogram.org/seaview/icons/2n.png</url>
      <title>2N Telekomunikace a.s. — recent CVEs</title>
      <link>https://vulnogram.org/</link>
    </image>
    <lastBuildDate>Wed, 21 Oct 2026 07:00:07 GMT</lastBuildDate>
    <item>
      <title>CVE-2025-59787 · 5.3 MEDIUM — HTTP 5XX Internal Server Errors</title>
      <link>https://vulnogram.org/CVE-2025-59787</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-59787</guid>
      <description>2N Access Commander application version 3.4.2 and prior returns HTTP 500 Internal Server Error responses when receiving malformed or manipulated requests, indicating improper handling of invalid input and potential security or availability impacts.</description>
      <category>Medium</category>
      <pubDate>Wed, 04 Mar 2026 15:31:59 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-59786 · 6 MEDIUM 🌩️ — Cookies are not Invalidated upon Logout and Password Change</title>
      <link>https://vulnogram.org/CVE-2025-59786</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-59786</guid>
      <description>2N Access Commander version 3.4.2 and prior improperly invalidates session tokens, allowing multiple session cookies to remain active after logout in web application.</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 04 Mar 2026 15:30:35 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-59785 · 5.3 MEDIUM — API - Insufficient Input Validation</title>
      <link>https://vulnogram.org/CVE-2025-59785</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-59785</guid>
      <description>Improper validation of API end-point in 2N Access Commander version 3.4.2 and prior allows attacker to bypass password policy for backup file encryption. This vulnerability can only be exploited after authenticating with administrator privileges.</description>
      <category>Medium</category>
      <pubDate>Wed, 04 Mar 2026 15:30:31 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-59784 · 6.9 MEDIUM 🌩️ — Log Pollution - Control Characters Not Escaped</title>
      <link>https://vulnogram.org/CVE-2025-59784</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-59784</guid>
      <description>2N Access Commander version 3.4.1 and prior is vulnerable to log pollution. Certain parameters sent over API may be included in the logs without prior validation or sanitisation. This vulnerability can only be exploited after authenticating with admi…</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 04 Mar 2026 15:26:47 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-59783 · 8.8 HIGH — OS Command Injection over API</title>
      <link>https://vulnogram.org/CVE-2025-59783</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-59783</guid>
      <description>API endpoint for user synchronization in 2N Access Commander version 3.4.1 did not have a sufficient input validation allowing for OS command injection. This vulnerability can only be exploited after authenticating with administrator privileges.</description>
      <category>High</category>
      <pubDate>Wed, 04 Mar 2026 15:19:13 GMT</pubDate>
    </item>
  </channel>
</rss>
