N2WS Backup & Recovery Remote Code Execution Vulnerability via RESTful API
Vulnerability
A remote code execution vulnerability has been identified in N2WS Backup & Recovery versions prior to 4.4.0. This vulnerability arises from a two-step exploit targeting the RESTful API, allowing for unauthorized execution of code on the server.
Impact
Exploitation of this vulnerability allows for remote code execution on the server where N2WS Backup & Recovery is running.
Remediation
Users are advised to upgrade to N2WS Backup & Recovery version 4.4.0 or later. For those on version 4.3.1, an upgrade to 4.3.2 is recommended. After upgrading, review API and user activity logs for any unexpected behavior.
Added: Mar 25, 2026, 3:25 PM
Updated: Mar 25, 2026, 3:25 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
10.0exploitability
7.4remediation
0.0relevance
4.7threat
0.0urgency
2.9incentive
4.2Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.