CVE-2025-59707

—

CVSS 3.1

9.8 critical

EPSS

<1%p43

Published

Mar 25, 2026 (Mar 25, 2026)

Modified

Jun 17, 2026

Description

In N2W before 4.3.2 and 4.4.x before 4.4.1, there is potential remote code execution and account credentials theft because of a spoofing vulnerability.

Vendors: n2ws
Products: n2w
Weakness: CWE-290
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.