Global News

New SAP NetWeaver Bug Lets Attackers Take Over Servers Without Login

SAP has rolled out security fixes for 13 new security issues, including additional hardening for a maximum-severity bug in SAP NetWeaver AS Java that could result in arbitrary command execution.
The vulnerability, tracked as CVE-2025-42944, carries a CVSS score of 10.0. It has been described as a case of insecure deserialization.
“Due to a deserialization vulnerability in SAP NetWeaver, an

Source: https://thehackernews.com/2025/10/new-sap-netweaver-bug-lets-attackers.html

#vulnerabilitysap #sapnetweaver #bugsap #netweaverbug #deserializationvulnerability