CVE-2025-32991 - Vulnerability Analysis

Overview

N2WS Backup & Recovery < 4.4.0 contains a remote code execution caused by a two-step attack against the RESTful API, letting remote attackers execute arbitrary code, exploit requires no special privileges.

Severity & Score

Impact

Remote attackers can execute arbitrary code, potentially leading to full system compromise.

Mitigation

Update to version 4.4.0 or later.

References

• https://n2ws.com/blog/security-advisory-update
• https://www.n2ws.com

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 26, 2026

🔴 CVE-2025-32991 - Critical (9) In N2WS Backup & Recovery before 4.4.0, a two-step attack against the RESTful API results in remote code execution. 🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-32991/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner