New SAP Net Weaver Bug Lets Attackers Take Over Servers Without Login
SAP patched 13 security issues, including CVE-2025-42944, a CVSS 10.0 insecure deserialization flaw in SAP NetWeaver AS Java that lets an unauthenticated attacker submit a malicious payload through the RMI-P4 module on an open port and achieve arbitrary OS...