SAP Patches Critical Flaws That Could Allow Remote Code Execution, Full System Takeover - SecurityWeek

SAP released 31 security notes, including six critical vulnerabilities. The most critical, CVE-2025-30012, allows unauthenticated attackers to execute arbitrary OS commands with administrative privileges. SAP users are advised to update their deployments as soon as possible.