U.S. CISA adds SAP NetWeaver flaw to its Known Exploited Vulnerabilities catalogSecurity Affairs·Apr 30, 00:05 UTC · Apr 30, 2025Exploit / PoC in the wildCVE-2025-31324CVE-2017-984460
SAP NetWeaver zero-day allegedly exploited by an initial access brokerSecurity Affairs·Apr 25, 15:48 UTC · Apr 25, 2025Exploit / PoCCVE-2025-31324CVE-2017-984460
Compromised SAP NetWeaver instances are ushering in opportunistic threat actorsHelp Net Security·May 15, 11:51 UTC · May 15, 2025Threat actor in the wildCVE-2025-31324CVE-2025-4299960
Exploit weaponizes SAP NetWeaver bugs for full system compromiseSecurity Affairs·Aug 20, 00:01 UTC · Aug 20, 2025Exploit / PoC in the wildCVE-2025-31324CVE-2025-42999CVE-2025-30012+4 CVEs160
Critical SAP NetWeaver flaw exploited by suspected initial access broker (CVE-2025-31324)Help Net Security·Aug 20, 08:46 UTC · Aug 20, 2025Vulnerability in the wildCVE-2025-3132460
U.S. CISA adds Google Chromium, DrayTek routers, and SAP NetWeaver flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·May 17, 08:02 UTC · May 17, 2025Exploit / PoC in the wildCVE-2024-12987CVE-2025-4664CVE-2025-4299960
Experts warn of a second wave of attacks targeting SAP NetWeaver bug CVE-2025Security Affairs·May 6, 13:55 UTC · May 6, 2025Exploit / PoC in the wildCVE-2025-31324160
New Critical SAP NetWeaver Flaw Exploited to Drop Web Shell, Brute Ratel FrameworkThe Hacker News·May 6, 13:53 UTC · May 6, 2025Exploit / PoC in the wildCVE-2017-9844CVE-2025-31324CVE-2017-12637160
BianLian and RansomExx Exploit SAP NetWeaver Flaw to Deploy PipeMagic TrojanThe Hacker News·May 15, 00:00 UTC · May 15, 2025Malware in the wildCVE-2025-31324CVE-2025-29824CVE-2025-42999160
Exploit for critical SAP Netweaver flaws released (CVE-2025-31324, CVE-2025-42999)Help Net Security·Aug 20, 00:00 UTC · Aug 20, 2025Vulnerability in the wildCVE-2025-31324CVE-2025-42999CVE-2025-30012+4 CVEs60
U.S. CISA adds Edimax IC-7100 IP Camera, NAKIVO, and SAP NetWeaver AS Java flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·Mar 20, 12:18 UTC · Mar 20, 2025Exploit / PoC in the wildCVE-2025-1316CVE-2024-48248CVE-2017-1263760
Public Exploit Released for Critical SAP NetWeaver FlawInfosecurity Magazine·Aug 19, 16:45 UTC · Aug 19, 2025Ransomware in the wildCVE-2025-31324CVE-2025-4299960
SAP April 2019 Security Patch Day addresses High severity flaws in Crystal Reports, NetWeaverSecurity Affairs·Apr 11, 05:28 UTC · Apr 11, 2019VulnerabilityCVE-2019-0285CVE-2019-0283CVE-2019-0265+5 CVEs60
China-Linked APTs Exploit SAP CVE-2025-31324 to Breach 581 Critical Systems WorldwideThe Hacker News·May 15, 00:00 UTC · May 15, 2025Vulnerability in the wildCVE-2025-31324CVE-2025-4299960
New SAP NetWeaver Bug Lets Attackers Take Over Servers Without LoginThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2025Exploit / PoC in the wildCVE-2025-42944CVE-2025-42937CVE-2025-42910160
Week in review: Critical SAP NetWeaver flaw exploited, RSAC 2025 ConferenceHelp Net Security·May 4, 00:00 UTC · May 4, 2025Ransomware in the wildCVE-2025-31324CVE-2025-3928CVE-2025-42599+1 CVEs60
SAP Flaw Exploited by Ransomware Groups and ChineseInfosecurity Magazine·May 15, 15:15 UTC · May 15, 2025Ransomware in the wildCVE-2025-31324CVE-2025-4299960
SAP zero-day vulnerability under widespread active exploitationCyberScoop·Apr 25, 17:51 UTC · Apr 25, 2025Exploit / PoC in the wildCVE-2025-3132460
Critical SAP flaw exploited to launch AutoSecurity Affairs·Jul 30, 07:46 UTC · Jul 30, 2025Exploit / PoCCVE-2025-3132460
Hacking SAP CRM by chaining 2 flaws in SAP NetWeaver AS JavaSecurity Affairs·Mar 16, 05:31 UTC · Mar 16, 2018Vulnerability55
SAP Patches Critical NetWeaver (CVSS Up to 10.0) and HighThe Hacker News·Sep 10, 06:09 UTC · Sep 10, 2025Vulnerability in the wildCVE-2025-42944CVE-2025-42922CVE-2025-42958+2 CVEs60
Auto-Color Backdoor Malware Exploits SAP VulnerabilityInfosecurity Magazine·Jul 29, 15:10 UTC · Jul 29, 2025VulnerabilityCVE-2025-3132460
90% of the SAP customers exposed to hack due to 13 YearSecurity Affairs·Apr 29, 17:14 UTC · Apr 29, 2018Vulnerability55
September 2020 Patch Tuesday: Microsoft fixes over 110 CVEs againHelp Net Security·Sep 8, 00:00 UTC · Sep 8, 2020Vulnerability in the wildCVE-2020-16875CVE-2020-0688CVE-2020-0951+5 CVEs160
SAP June 2025 Security Patch Day fixed critical NetWeaver bugSecurity Affairs·Jun 10, 17:31 UTC · Jun 10, 2025VulnerabilityCVE-2025-42989CVE-2025-42982CVE-2025-42983+3 CVEs60
Most SAP systems vulnerable to critical security configuration riskHelp Net Security·Apr 26, 00:00 UTC · Apr 26, 2018Vulnerability55
New Highly-Critical SAP Bug Could Let Attackers Take Over Corporate ServersThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2020Vulnerability in the wildCVE-2020-628760
SAP Security NotesSecurity Affairs·Feb 15, 15:14 UTC · Feb 15, 2018VulnerabilityCVE-2018-2368CVE-2018-2380CVE-2018-2369+1 CVEs60
SAP cyberattack widens, drawing Salt Typhoon and Volt Typhoon comparisonsCyberScoop·May 15, 17:45 UTC · May 15, 2025Threat actor in the wild60
Ivanti, Fortinet, and SAP Release Patches for Multiple Critical VulnerabilitiesThe Hacker News·Jun 12, 18:42 UTC · Jun 12, 2026Vulnerability in the wildCVE-2026-25089CVE-2026-10520CVE-2026-10523+4 CVEs160
October 2020 Patch Tuesday: Microsoft fixes potentially wormable Windows TCP/IP RCE flawHelp Net Security·Oct 13, 00:00 UTC · Oct 13, 2020Vulnerability in the wildCVE-2020-16898CVE-2020-16947CVE-2020-16909+7 CVEs60
Microsoft, Adobe, SAP deliver critical fixes for September 2025 Patch TuesdayHelp Net Security·Sep 10, 00:00 UTC · Sep 10, 2025Vulnerability in the wildCVE-2025-54918CVE-2025-54916CVE-2025-55232+8 CVEs60
Watch Out! Mission Critical SAP Applications Are Under Active AttackThe Hacker News·Apr 7, 04:31 UTC · Apr 7, 2021Ransomware in the wildCVE-2020-6287CVE-2010-5326CVE-2016-3976+3 CVEs60
Critical SAP Recon flaw exposes thousands of system to full take overSecurity Affairs·Jul 14, 10:08 UTC · Jul 14, 2020Vulnerability in the wildCVE-2020-628760
SAP fixed maximumSecurity Affairs·Oct 15, 10:03 UTC · Oct 15, 2025VulnerabilityCVE-2025-42944CVE-2025-42937CVE-2025-4291060
Public Exploit for Chained SAP Flaws Exposes Unpatched Systems to Remote Code ExecutionThe Hacker News·Aug 19, 17:30 UTC · Aug 19, 2025VulnerabilityCVE-2025-31324CVE-2025-42999CVE-2025-30012+4 CVEs60
Hackers Exploit SAP Vulnerability to Breach Linux Systems and Deploy AutoThe Hacker News·Jul 30, 07:50 UTC · Jul 30, 2025VulnerabilityCVE-2025-3132460
⚡ Weekly Recap: Critical SAP Exploit, AI-Powered Phishing, Major Breaches, New CVEs & MoreThe Hacker News·May 6, 07:05 UTC · May 6, 2025Phishing & fraudCVE-2025-31324CVE-2024-58136CVE-2025-32432+16 CVEs60
A light December 2020 Patch Tuesday for a no-stress end of the yearHelp Net Security·Dec 8, 00:00 UTC · Dec 8, 2020Vulnerability in the wildCVE-2020-17132CVE-2020-16875CVE-2020-17095+2 CVEs60
SAP Patches Critical NetWeaver and ABAP Platform VulnerabilitiesInfosecurity Magazine·Jun 15, 17:00 UTC · Jun 15, 2022Vulnerability55