SAP: SAP confirms NetWeaver vulnerability is being actively exploited

Software supplier SAP warns of active exploitation of a critical vulnerability (CVE-2025-31324) in SAP NetWeaver Visual Composer. Attackers are not only exploiting the vulnerability, they are also placing webshells to maintain persistent access. SAP urgently advises installing the emergency patch and checking systems for abuse. The threat level is high, and the consequences could be [...]