Exploit discussion active in current signal (2 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
In N2WS Backup & Recovery before 4.4.0, a two-step attack against the RESTful API results in remote code execution.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-25 | 1 | Disclosure1 |
| 2026-03-26 | 2 | Disclosure1General1 |
⚡ New CVE Alert: CVE-2025-32991 🚨 Risk Level: Unknown 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-32991 #CVE-2025-32991 #CVE #CyberSecurity #InfoSec https://t.co/cGq1RJMTH4
Post summary
A brief announcement of CVE-2025-32991 with minimal detail and no evidence of PoC, exploit, active exploitation, patch, or technical specifics.
🔴 CVE-2025-32991 - Critical In N2WS Backup & Recovery before 4.4.0, a two-step attack against the RESTful API results in remote code execution. https://www.thehackerwire.com/vulnerability/CVE-2025-32991/ https://t.co/bqsYBnuw6h
Post summary
A critical vulnerability (CVE‑2025‑32991) is disclosed, detailing a two‑step RCE via the RESTful API in N2WS Backup & Recovery versions prior to 4.4.0, with a link to further details.
[CVE-2025-32991: CRITICAL] In N2WS Backup & Recovery before 4.4.0, a two-step attack against the RESTful API results in remote code execution.#cve,CVE-2025-32991,#cybersecurity https://cvefind.com/CVE-2025-32991
Post summary
CVE‑2025‑32991 is a critical remote code execution flaw in N2WS Backup & Recovery versions prior to 4.4.0, where a two‑step attack on the RESTful API can be used to gain code execution. No PoC, exploit code, patch, or evidence of active exploitation is mentioned.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | n2w | backup\&_recovery | - | - | - |