CVE Intelligence

N2ws vulnerabilities

🔔 Create alert RSS

Published CVEs affecting N2ws products: 2 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2025-59707 Critical · 9.8 CWE-290 Mar 25, 2026
Authentication Bypass by Spoofing in N2ws N2w
In N2W before 4.3.2 and 4.4.x before 4.4.1, there is potential remote code execution and account credentials theft because of a spoofing vulnerability.
CVE-2025-59706 Critical · 9.8 CWE-290 Mar 25, 2026
Authentication Bypass by Spoofing in N2ws N2w
In N2W before 4.3.2 and 4.4.0 before 4.4.1, improper validation of API request parameters enables remote code execution.