Programs such as https://github.com/matja/bitcoin-tool can bruteforce the missing characters in the private key.
If it's only two of them, it'd take less than a minute.