Critical Vulnerability Patched in SAP NetWeaver - SecurityWeek

SAP released 14 security patches, including a critical fix for a NetWeaver vulnerability (CVE-2025-42989) allowing attackers to bypass authorization checks and escalate privileges. The patch day also addressed high, medium, and low-severity flaws in various SAP products.