In N2W before 4.3.2 and 4.4.0 before 4.4.1, improper validation of API request parameters enables remote code execution.

Metrics

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
N2ws
  • N2w

No data.

No data.

References
Link Providers
https://n2ws.com/blog/security-advisory-update cve-icon cve-icon
https://n2ws.zendesk.com/hc/en-us/articles/29817965452701-Release-notes-for-N2W-V4-3-2-August-2025 cve-icon cve-icon
https://www.n2ws.com cve-icon cve-icon
History

Thu, 26 Mar 2026 14:00:00 +0000

Type Values Removed Values Added
Title Remote Code Execution via Improper API Parameter Validation in N2W
Weaknesses CWE-20

Thu, 26 Mar 2026 12:30:00 +0000

Type Values Removed Values Added
Title Remote Code Execution via Unvalidated API Parameters in N2W
Weaknesses CWE-20
CWE-94

Thu, 26 Mar 2026 12:00:00 +0000

Type Values Removed Values Added
First Time appeared N2ws
N2ws n2w
Vendors & Products N2ws
N2ws n2w

Wed, 25 Mar 2026 22:00:00 +0000

Type Values Removed Values Added
Title Remote Code Execution via Unvalidated API Parameters in N2W
Weaknesses CWE-20
CWE-94

Wed, 25 Mar 2026 15:00:00 +0000

Type Values Removed Values Added
Description In N2W before 4.3.2 and 4.4.0 before 4.4.1, improper validation of API request parameters enables remote code execution.
References
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2026-03-25T00:00:00.000Z

Updated: 2026-03-25T14:44:42.223Z

Reserved: 2025-09-19T00:00:00.000Z

Link: CVE-2025-59706

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-03-25T15:16:29.140

Modified: 2026-03-25T15:41:33.977

Link: CVE-2025-59706

cve-icon Redhat

No data.