CRITICAL SAP VULNERABILITY CVE-2025-42957 ACTIVELY EXPLOITED BY HACKERS

Summary from the TLDR InfoSec newsletter

Hackers are exploiting a critical CVE in SAP S/4HANA that enables low-level users to gain admin control. The flaw affects multiple versions, risking data theft, backdoors, and ransomware. SAP released patches on August 12. Organizations should update immediately, as the Dutch NCSC issued a medium-high priority advisory on September 5.