ctrlINT What the industry said about every indicator, with the quote

CVE-2025-31324Vulnerability

SAP NetWeaver Unrestricted File Upload Vulnerability

Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .

Reported by 3 independent sources · first reported by Recorded Future · last reported

Last reported 9 days ago

CISA KEVAdded 29 Apr 2025
Fix due 20 May 2025
Used by ransomware: knownCISA KEV catalogue
EPSS99.5%
higher than 99% of CVEsFIRST EPSS, as of 23 Oct 2026

What the reports say

3 reports, newest first · the exact sentence from each

  1. “CVE-2025-31324”

    GreyNoiseVendor
    skynox7: Proxyjacking Edge Devices Into Residential Proxies

  2. “…ritizing Sophos XG (CVE-2022-1040), WordPress (CVE-2026-63030), FortiOS (CVE-2024-55591), F5 BIG-IP (CVE-2023-46747), SAP NetWeaver (CVE-2025-31324), and Roundcube (CVE-2025-49113 / CVE-2025-25257).”

    SOCRadarVendor
    Operation Talked: A Russia-Linked Cyber Espionage Campaign Targeting Ukraine’s Defense Industry

  3. “CVE-2025-31324”

    Recorded FutureVendor
    August 2026 CVE Landscape

Indicators reported together

named in the same reports

Also named with it: CVE-2025-49113, CVE-2026-63030, CVE-2022-1040, CVE-2023-46747, CVE-2024-55591, CVE-2026-68820, CVE-2026-65400, CVE-2026-60004, CVE-2026-64849, CVE-2026-33824, CVE-2026-0300, CVE-2026-33017, CVE-2017-0199, CVE-2022-0847, CVE-2026-34486, CVE-2026-39987, CVE-2021-3156, CVE-2021-29441, CVE-2026-3055, CVE-2026-12569

Thanks — we review every report.

Report a wrong value
What is wrong with CVE-2025-31324 here?
No account needed. We do not store your IP address.