CVE-2025-32991

In N2WS Backup & Recovery before 4.4.0, a two-step attack against the RESTful API results in remote code execution...

CVE-2025-32991

Versions of N2WS Backup & Recovery prior to 4.4.0 are vulnerable to remote code execution (RCE) via a two-step attack against the RESTful API . While the specific API endpoints and vulnerable parameters are not disclosed, the vulnerability allows an attacker to potentially execute arbitrary code ...