critical9.0
CVE-2025-32991
In N2WS Backup & Recovery before 4.4.0, a two-step attack against the RESTful API results in remote code execution.
Impact
In N2WS Backup & Recovery before 4.4.0, a two-step attack against the RESTful API results in remote code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| N2w | Backup\& Recovery | before 4.3.2 |