SAP patches critical S/4HANA flaw which allowed full system takeover Attackers can inject ABAP code and bypass authorization using RFC Some systems remain unpatched, and confirmed abuse has already ...
Security experts have warned SAP S/4HANA cloud customers that a critical code injection vulnerability patched by the vendor in August is being exploited in the wild. The vulnerability, CVE-2025-42957, ...
SAP S/4HANA admins who haven’t already installed a critical August 11 patch could be in trouble: An exploit for the code injection vulnerability is already being exploited in the wild. The ...