China-based hackers exploited SAP flaw CVE-2025-31324 since April 29, impacting global industries via web shells.

A zero-day in SAP NetWeaver is potentially being exploited, putting thousands of internet-facing applications at risk. Researchers warn that a zero-day vulnerability, tracked as CVE-2025-31324 (CVSS score of 10/10), in SAP NetWeaver is potentially being exploited. Thousands of internet-facing applications are potentially at risk. The flaw in SAP NetWeaver Visual Composer Metadata Uploader stems from a lack […]

Hackers are dancing the tango with a critical SAP NetWeaver vulnerability, CVE-2025-31324, deploying Auto-Color Linux malware faster than a cat meme goes viral. Darktrace found the malware now sports advanced evasion tactics, making it sneakier than a ninja in a library. If you're running NetWeaver, update faster than you can say "cyberattack"!

Hackers were spotted exploiting a critical SAP NetWeaver vulnerability tracked as CVE-2025-31324 to deploy the Auto-Color Linux malware in a cyberattack on a U.S.-based chemicals company.

IONIX is the only EASM solution that discovers the full extent of your online risk exposure and actively protects your hyper-connected external attack surface.

Unternehmen aufgepasst: Die Sicherheitslücke CVE-2025-31324 wird aktiv ausgenutzt. Erfahren Sie mehr über den ShinyHunters-Exploit.

Over 1,200 internet-exposed SAP NetWeaver instances are vulnerable to an actively exploited maximum severity unauthenticated file upload vulnerability that allows attackers to hijack servers.

Researchers attribute the attacks to an initial access broker who is exploiting the 10.0 critical vulnerability.

Short Description Recently, a CVSS 10 vulnerability, CVE-2025-31324, affecting the "Visual Composer" component of the SAP NetWeaver application server, has...

Unlock the Secrets of Ethical Hacking! Ready to dive into the world of offensive security? This course gives you the Black Hat hacker's perspective, teaching you attack techniques to defend against malicious activity. Learn to hack Android and Windows systems, create undetectable malware and ransomware, and even master spoofing techniques. Start your first hack in just one hour! Enroll now and gain industry-standard knowledge: Enroll Now! A newly revealed SAP NetWeaver critical vulnerability, an unauthenticated file upload flaw that allows RCE and tracked as CVE-2025-31324, is being actively exploited by several China-linked nation-state groups to attack critical infrastructure systems.

Origin

Forescout’s Vedere Labs research and threat hunting team analyzes SAP vulnerability (CVE-2025-31324) in the wild.

China-based hackers exploited SAP flaw CVE-2025-31324 since April 29, impacting global industries via web shells.

Threat actors exploit SAP NetWeaver flaw + zero-day suspected + CVE-2025-31324 enables file uploads.