CVE-2025-31030

Summary

CVE-2025-31030 is a newly disclosed vulnerability affecting the Ray Enterprise Translation software. It involves an improper control of filename for include/require statement in PHP programs, leading to a PHP Remote File Inclusion (RFI) vulnerability. attackers can exploit this issue to include local files on the affected system, potentially gaining unauthorized access and executing arbitrary code. The vulnerability exists in Ray Enterprise Translation from its inception through version 1.7.0. System administrators are advised to update their software to a patched version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.