N2ws vulnerabilities
Published CVEs affecting N2ws products: 2 record(s), with severity, exploitation and fixes.
CVE-2025-59707
Critical · 9.8
CWE-290 Mar 25, 2026
Authentication Bypass by Spoofing in N2ws N2w
In N2W before 4.3.2 and 4.4.x before 4.4.1, there is potential remote code execution and account credentials theft because of a spoofing vulnerability.
CVE-2025-59706
Critical · 9.8
CWE-290 Mar 25, 2026
Authentication Bypass by Spoofing in N2ws N2w
In N2W before 4.3.2 and 4.4.0 before 4.4.1, improper validation of API request parameters enables remote code execution.