Firetruck

CVE-2025-42999

KEV · Ransomware
Updated Aug 11, 2026 · PUBLISHED
View KEV entry →

Description

SAP NetWeaver Visual Composer Metadata Uploader contains a deserialization vulnerability that allows a privileged attacker to compromise the confidentiality, integrity, and availability of the host system by deserializing untrusted or malicious content.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
SAP NetWeaver (Visual Composer development server)SAP_SE / SAP NetWeaver (Visual Composer development server)VCFRAMEWORK 7.50affected