SAP NetWeaver Zero-Day CVE-2025-31324 Exploited by China APTs, 581 Breaches

A critical zero-day vulnerability in SAP NetWeaver (CVE-2025-31324) enables hackers to upload malicious files, execute code, and deploy malware like Auto-Color, targeting industries worldwide. China-linked APTs have exploited it since January 2025, breaching 581 systems. SAP issued patches in May, but experts urge immediate mitigation and vigilant monitoring.