In N2W before 4.3.2 and 4.4.x before 4.4.1, there is potential remote code execution and account credentials theft because of a spoofing vulnerability.
Metrics
Affected Vendors & Products
References
History
Thu, 26 Mar 2026 14:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Remote Code Execution via Spoofing in N2W versions prior to 4.4.1 | |
| Weaknesses | CWE-200 CWE-285 |
Thu, 26 Mar 2026 12:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Spoofing Vulnerability in N2W Allowing Remote Code Execution and Credential Theft | |
| Weaknesses | CWE-287 CWE-306 |
Thu, 26 Mar 2026 12:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
N2ws
N2ws n2w |
|
| Vendors & Products |
N2ws
N2ws n2w |
Wed, 25 Mar 2026 22:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Spoofing Vulnerability in N2W Allowing Remote Code Execution and Credential Theft | |
| Weaknesses | CWE-287 CWE-306 |
Wed, 25 Mar 2026 15:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In N2W before 4.3.2 and 4.4.x before 4.4.1, there is potential remote code execution and account credentials theft because of a spoofing vulnerability. | |
| References |
|
Status: PUBLISHED
Assigner: mitre
Published: 2026-03-25T00:00:00.000Z
Updated: 2026-03-25T14:45:16.648Z
Reserved: 2025-09-19T00:00:00.000Z
Link: CVE-2025-59707
No data.
Status : Awaiting Analysis
Published: 2026-03-25T15:16:29.257
Modified: 2026-03-25T15:41:33.977
Link: CVE-2025-59707
No data.