← Back to CVE search

CVE-2025-32991

N2WS Backup & Recovery

Description

In N2WS Backup & Recovery before 4.4.0, a two-step attack against the RESTful API results in remote code execution.

CVSS 9EPSS 0.33899999999999997%Risk 0.93
View source
Published
2026-03-25 15:16:28
Affected versions
<4.4.0
Type
Installed app
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H