SAP has released patches to address a second vulnerability exploited in recent attacks targeting SAP NetWeaver servers as a ...

SAP fixed CVE-2025-42999, a 9.1/10 vulnerability in NetWeaver This one was chained with CVE-2025-31324, which was fixed in ...

Threat actors are revisiting SAP NetWeaver instances to leverage webshells deployed via a recent zero-day vulnerability.

A recently disclosed SAP NetWeaver zero-day that has been targeted for remote code execution since January 2025.

Forescout Vedere Labs security researchers have linked ongoing attacks targeting a maximum severity vulnerability impacting ...

BianLian and RansomExx Exploit SAP CVE-2025-31324 for Full Access, Deploy PipeMagic and Brute Ratel in Multi-Nation Attacks.

Attackers have been exploiting a critical zero-day vulnerability in the Visual Composer component of the SAP NetWeaver application server since early this week. SAP released an out-of-band fix ...