New SAP NetWeaver Bug Lets Attackers Take Over Servers Without Login

Source: The Hacker News | Added:

SAP has announced security fixes for 13 vulnerabilities, including a critical flaw in SAP NetWeaver AS Java that allows for arbitrary command execution due to insecure deserialization. This vulnerability, identified as CVE-2025-42944, has a maximum CVSS score of 10.0.

Impact: SAP NetWeaver AS Java

In the Wild: Unknown

Age: Newly disclosed

Remediation: Security fixes have been rolled out by SAP.

CVE Vulnerability

Read Full Original Article →