Vulnerability (CVE)
SAP released security updates on Tuesday addressing three critical vulnerabilities in SAP NetWeaver, including CVE-2025-42944, which Onapsis says lets an unauthenticated attacker execute arbitrary OS commands by submitting a malicious payload to an open...
A copycat of the Petya/NotPetya malware, dubbed HybridPetya, has been spotted and can compromise UEFI Secure Boot by installing a malicious application, though no telemetry suggests it has been deployed in the wild. ESET said it found HybridPetya samples...
SAP patched 13 security issues, including CVE-2025-42944, a CVSS 10.0 insecure deserialization flaw in SAP NetWeaver AS Java that lets an unauthenticated attacker submit a malicious payload through the RMI-P4 module on an open port and achieve arbitrary OS...