CVE-2025-32991 | N2WS Backup & Recovery up to 4.3.x RESTful API privilege escalation

A vulnerability was found in N2WS Backup & Recovery up to 4.3.x. It has been classified as critical. Affected by this vulnerability is an unknown functionality of the component RESTful API. This manipulation causes privilege escalation.

This vulnerability is registered as CVE-2025-32991. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is recommended.