A not too long ago disclosed essential safety flaw impacting SAP NetWeaver is being exploited by a number of China-nexus nation-state actors to focus on essential infrastructure networks.
“Actors leveraged CVE-2025-31324, an unauthenticated file add vulnerability that allows distant code execution (RCE),” EclecticIQ researcher Arda Büyükkaya mentioned in an evaluation printed in the present day.
Targets of the marketing campaign
China-Linked APTs Exploit SAP CVE-2025-31324 to Breach 581 Essential Techniques Worldwide
