SAP Supplier Relationship Management (SRM) is a system used by enterprises to manage and optimize relationships with suppliers. SAP recently announced in its monthly update that the service has 1 critical security vulnerability (CVE-2025-42910, CVSS: 9.0). This vulnerability stems from a lack of file type or content validation, which allows an authenticated attacker to upload arbitrary files. If successfully exploited, the attacker may severely impact the confidentiality, integrity, and availability of the application.