Vendors / N2ws Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 0
Exploited now N2ws records in CISA KEV No N2ws vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 50
In N2W before 4.3.2 and 4.4.x before 4.4.1, there is potential remote code execution and account credentials theft because of a spoofing vulnerability.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00548 · Published 2026-03-25 · No fix listed CWE-290
Priority MEDIUM 50
In N2W before 4.3.2 and 4.4.0 before 4.4.1, improper validation of API request parameters enables remote code execution.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00548 · Published 2026-03-25 · No fix listed CWE-290
Open these records in search → All records by CVSS severity
2 0 0 0 0
