A vulnerability was found in N2W up to 4.3.1/4.4.0 . It has been rated as critical . This affects an unknown part. Performing a manipulation results in privilege escalation. This vulnerability is reported as CVE-2025-59707 . The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is advised.
Full text archived locally
✦ AI Summary· Claude Sonnet
VDB-353158 · CVE-2025-59707 · GCVE-0-2025-59707
N2W PRIVILEGE ESCALATION
HISTORYDIFFRELATEJSONXMLCTI
CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score
6.0 $0-$5k 2.22+
Summaryinfo
A vulnerability categorized as critical has been discovered in N2W up to 4.3.1/4.4.0. This vulnerability affects unknown code. Executing a manipulation can lead to Remote Privilege Escalation. This vulnerability appears as CVE-2025-59707. The attack may be performed from remote. There is no available exploit. It is advisable to upgrade the affected component.
Detailsinfo
A vulnerability was found in N2W up to 4.3.1/4.4.0. It has been declared as critical. This vulnerability affects an unknown functionality. The manipulation with an unknown input leads to a remote privilege escalation vulnerability. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:
In N2W before 4.3.2 and 4.4.x before 4.4.1, there is potential remote code execution and account credentials theft because of a spoofing vulnerability.
This vulnerability was named CVE-2025-59707 since 09/19/2025. The exploitation appears to be easy. The attack can be initiated remotely. The technical details are unknown and an exploit is not available.
Upgrading to version 4.3.2 or 4.4.1 eliminates this vulnerability.
Productinfo
Vendor
N2W
Version
4.0
4.1
4.2
4.3
4.3.0
4.3.1
4.4.0
CPE 2.3info
🔒
🔒
🔒
CPE 2.2info
🔒
🔒
🔒
CVSSv4info
VulDB Vector: 🔒
VulDB Reliability: 🔍
CVSSv3info
VulDB Meta Base Score: 6.3
VulDB Meta Temp Score: 6.0
VulDB Base Score: 6.3
VulDB Temp Score: 6.0
VulDB Vector: 🔒
VulDB Reliability: 🔍
CVSSv2info
Vector Complexity Authentication Confidentiality Integrity Availability
Unlock Unlock Unlock Unlock Unlock Unlock
Unlock Unlock Unlock Unlock Unlock Unlock
Unlock Unlock Unlock Unlock Unlock Unlock
VulDB Base Score: 🔒
VulDB Temp Score: 🔒
VulDB Reliability: 🔍
Exploitinginfo
Class: Privilege escalation
CWE: Unknown
CAPEC: 🔒
ATT&CK: 🔒
Physical: No
Local: No
Remote: Yes
Availability: 🔒
Status: Not defined
Price Prediction: 🔍
Current Price Estimation: 🔒
0-Day Unlock Unlock Unlock Unlock
Today Unlock Unlock Unlock Unlock
Threat Intelligenceinfo
Interest: 🔍
Active Actors: 🔍
Active APT Groups: 🔍
Countermeasuresinfo
Recommended: Upgrade
Status: 🔍
0-Day Time: 🔒
Upgrade: Version 4.3.2/4.4.1
Timelineinfo
09/19/2025 CVE reserved
03/25/2026 +187 days Advisory disclosed
03/25/2026 +0 days VulDB entry created
03/25/2026 +0 days VulDB entry last update
Sourcesinfo
Status: Confirmed
CVE: CVE-2025-59707 (🔒)
GCVE (CVE): GCVE-0-2025-59707
GCVE (VulDB): GCVE-100-353158
Entryinfo
Created: 03/25/2026 16:15
Changes: 03/25/2026 16:15 (50)
Complete: 🔍
Cache ID: 99:E00:101
Discussion
No comments yet. Languages: en.
Please log in to comment.
◂ PreviousOverviewNext ▸