Firetruck

CVE-2025-31324

KEV · Ransomware
Updated Aug 4, 2026 · PUBLISHED
View KEV entry →

Description

SAP NetWeaver Visual Composer Metadata Uploader contains an unrestricted file upload vulnerability that allows an unauthenticated agent to upload potentially malicious executable binaries.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
SAP NetWeaver (Visual Composer development server)SAP_SE / SAP NetWeaver (Visual Composer development server)VCFRAMEWORK 7.50affected