CVE-2025-31324Critical· 10.0▾ Hadal⚠ Exploited in the wild

SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system

SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could signifi…

▾ Hadal zone — Critical and actively exploited (CISA KEV / 0day)

Depth score100/ 100 · Severe

impact 55 · likelihood 19.9 · exploitation 25 · ransomware 5

🔒

Full detail requires an account

The latest CVEs are free to read. CVE-2025-31324 is outside the free window — sign in (free) to view the full technical detail, affected versions, references, and raw markdown.