SAP ZERO-DAY VULNERABILITY UNDER WIDESPREAD ACTIVE EXPLOITATION

Summary from the TLDR InfoSec newsletter

SAP Netweaver software has an unrestricted file upload vulnerability identified by CVE-2025-31324. After querying internet server search engines Shodan and Censys, Onapsis estimates that about 10,000 SAP instances are potentially vulnerable. It is a CVSS 10 vulnerability, remotely exploitable through HTTP unauthenticated, that allows for complete system compromise.