Lucene search
K

10 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 3:19 p.m.1 views

CVE-2025-59707

In N2W before 4.3.2 and 4.4.x before 4.4.1, there is potential remote code execution and account credentials theft because of a spoofing vulnerability...

9.8CVSS6.5AI score0.00321EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/03/25 12:0 a.m.0 views

CVE-2025-59707

In N2W before 4.3.2 and 4.4.x before 4.4.1, there is potential remote code execution and account credentials theft because of a spoofing vulnerability...

6.5AI score0.00321EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/03/25 12:0 a.m.17 views

CVE-2025-59706

In N2W before 4.3.2 and 4.4.0 before 4.4.1, improper validation of API request parameters enables remote code execution...

0.00321EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/03/25 12:0 a.m.3 views

PT-2026-27779

Name of the Vulnerable Software and Affected Versions N2W versions prior to 4.3.2 N2W version 4.4.0 Description Improper validation of API request parameters can allow for remote code execution. Recommendations Update N2W to a version newer than 4.3.2. Update N2W to a version newer than 4.4.0...

6.1AI score0.00321EPSS
Exploits0References5
CVE
CVE
added 2026/03/25 12:0 a.m.5 views

CVE-2025-59707

Affected software: N2W. Vulnerable versions: before 4.3.2 and 4.4.x before 4.4.1. Root cause: a spoofing vulnerability that can lead to remote code execution and theft of account credentials. Impact: potential RCE and credential exposure as described in multiple sources (Red Hat and ENISA entries...

9.8CVSS6.5AI score0.00321EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/25 12:0 a.m.2 views

CVE-2025-59706

In N2W before 4.3.2 and 4.4.0 before 4.4.1, improper validation of API request parameters enables remote code execution...

6.1AI score0.00321EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/03/25 12:0 a.m.3 views

N2W 安全漏洞

N2W is a data backup and recovery software developed by N2W Corporation. Versions of N2W prior to 4.4.0 contained security vulnerabilities. These vulnerabilities stemmed from a two-step attack targeting RESTful APIs, which could lead to remote code execution...

9CVSS6.2AI score0.00263EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/03/25 12:0 a.m.23 views

CVE-2025-59707

In N2W before 4.3.2 and 4.4.x before 4.4.1, there is potential remote code execution and account credentials theft because of a spoofing vulnerability...

0.00321EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/03/25 12:0 a.m.0 views

PT-2026-27780

Name of the Vulnerable Software and Affected Versions N2W versions prior to 4.3.2 N2W versions 4.4.x prior to 4.4.1 Description The software contains a spoofing issue that could lead to remote code execution and the theft of account credentials. Recommendations Update N2W to version 4.3.2 or late...

6.5AI score0.00321EPSS
Exploits0References5
CVE
CVE
added 2026/03/25 12:0 a.m.3 views

CVE-2025-59706

The CVE affects N2W prior to 4.3.2 and 4.4.0 prior to 4.4.1, where improper validation of API request parameters enables remote code execution. Root cause: parameter validation weakness in API handling. Impact: potential RCE with high severity. Mitigation: upgrade to a fixed release (N2W 4.3.2+ a...

9.8CVSS6.1AI score0.00321EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder