CVE-2025-31324

An unauthenticated attacker can upload malicious executables via SAP NetWeaver's Visual Composer Metadata Uploader, enabling remote code execution and ransomware deployment.

SAP NetWeaver's unrestricted file upload flaw allows unauthenticated agents to deploy malicious binaries, directly enabling remote code execution and ransomware attacks. DIB organizations must patch this critical vulnerability immediately, as it bypasses authentication controls and violates CMMC/NIST 800-171 requirements for preventing unauthorized access and malicious code execution. Failure to patch exposes the organization to supply-chain compromise and data exfiltration.

Shame score — A critical, actively exploited vulnerability allowing unauthenticated remote code execution and ransomware deployment represents a severe, avoidable failure in secure software design and patch management.