Public Exploit for Chained SAP Flaws Exposes Unpatched Systems to Remote Code Execution

Source: The Hacker News | Added:

A new exploit has been discovered that combines two critical security flaws in SAP NetWeaver, allowing attackers to bypass authentication and execute remote code. This poses significant risks to organizations, including potential system compromise and data theft.

---

Impact: SAP NetWeaver

In the Wild: Yes

Age: Newly disclosed

Remediation: Update to patched versions addressing CVE-2025-31324 and CVE-2025-42999

Read Full Original Article →