sign in--:--:--UTC

CVE-2025-31324

exploited in the wild☆ pin

CVSS

—

Reports

2

First seen

May 14, 2025

Last seen

Aug 15, 2026

Affected product

SAP NetWeaver 7.x (Visual Composer Metadata Uploader)

Associated actors

BianLian ×1 CL-STA-0048 ×1 RansomExx ×1 UNC5174 ×1 UNC5221 ×1

Recent reports

SAP Commerce Cloud CVE-2026-58231 Exploited Days After Patch Release

The Hacker NewsAug 15, 2026 Critical

NetWeaver Arbitrary File Upload Vulnerability (CVE-2025-31324) Under Active Exploitation

NICS TaiwanMay 14, 2025

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans