← Database

CVE-2025-32991

CRITICAL CVSS: 9.0 Published: 2026-03-25 Modified: 2026-06-17

Description

In N2WS Backup & Recovery before 4.4.0, a two-step attack against the RESTful API results in remote code execution.

Affected Platforms

N2W Backup\& Recovery

Weakness Type

CWE-362

References