2N vulnerabilities
We track 8 vulnerabilities in 2N products across 2 products. 8 are rated high or critical, and none are known to be exploited. The most recent was published on March 4, 2026.
Latest 2N vulnerabilities
- 9.8 Critical severity
2N Access Commander version 3.4.2 and prior improperly invalidates session tokens, allowing…
2N Access Commander version 3.4.2 and prior improperly invalidates session tokens, allowing multiple session cookies to remain active after logout in web application.
- 7.2 High severity
2N Access Commander: Improper Validation of Syntactic Correctness of Input
Improper validation of API end-point in 2N Access Commander version 3.4.2 and prior allows attacker to bypass password policy for backup file encryption. This vulnerability can only be exploited after authenticating with administrator privileges.
- 7.2 High severity
2N Access Commander: Improper Output Neutralization for Logs
2N Access Commander version 3.4.1 and prior is vulnerable to log pollution. Certain parameters sent over API may be included in the logs without prior validation or sanitisation. This vulnerability can only be exploited after authenticating with administrator
- 7.2 High severity
2N Access Commander: Improper Neutralization of Special Elements used in an OS Command
API endpoint for user synchronization in 2N Access Commander version 3.4.1 did not have a sufficient input validation allowing for OS command injection. This vulnerability can only be exploited after authenticating with administrator privileges.
- 8.1 High severity
2N Access Commander: Improper Certificate Validation
2N Access Commander version 2.1 and prior is vulnerable in default settings to Man In The Middle attack due to not verifying certificates of 2N edge devices. 2N has currently released an updated version 3.3 of 2N Access Commander, with added Certificate Finger
- 7.8 High severity
2N Access Commander: Improper Validation of Integrity Check Value
In 2N Access Commander versions 3.1.1.2 and prior, a local attacker can escalate their privileges in the system which could allow for arbitrary code execution with root permissions.
- 7.2 High severity
2N Access Commander: Reliance on Untrusted Inputs in a Security Decision
In 2N Access Commander versions 3.1.1.2 and prior, an Insufficient Verification of Data Authenticity vulnerability could allow an attacker to escalate their privileges and gain root access to the system.
- 7.2 High severity
2N Access Commander: Improper Limitation of a Pathname to a Restricted Directory
In 2N Access Commander versions 3.1.1.2 and prior, a Path Traversal vulnerability could allow an attacker with administrative privileges to write files on the filesystem and potentially achieve arbitrary remote code execution. This vulnerability cannot be expl