SAP NetWeaver Under Siege: Double Trouble with Zero-Day Exploits!
SAP patches a new vulnerability in NetWeaver servers after zero-day attacks. This flaw, alongside another, allows cybercriminals to execute commands remotely. Over 2,000 servers are exposed online, and attackers are exploiting these vulnerabilities since January. SAP urges immediate patching to protect systems.
Hot Take:
As if Mondays weren’t bad enough, SAP decided to drop a fresh batch of security patches like a hot new mixtape. But instead of catchy beats, we’ve got vulnerabilities that make your servers dance to a hacker’s tune. So, if you’re using SAP NetWeaver, it’s time to patch up those holes before your digital ship sinks faster than you can say “zero-day”.
Key Points:
– SAP has issued a new patch for CVE-2025-42999, a zero-day vulnerability in SAP NetWeaver.
– Previously, another zero-day flaw (CVE-2025-31324) in the same system was exploited.
– Hackers have been using these vulnerabilities to upload malicious web shells.
– Over 2,000 SAP NetWeaver servers are exposed and at risk.
– CISA has mandated federal agencies to secure their systems against these vulnerabilities by May 20.