
- SAP patched CVE-2025-42944, a critical flaw allowing unauthenticated OS command execution
- Two more severe vulnerabilities affect SAP Print Service and Supplier Relationship Management modules
- Unpatched systems remain exposed; n-day flaws are widely exploited due to delayed patching
Software giant SAP released additional security hardening for a maximum-severity vulnerability that grants threat actors arbitrary command execution capabilities on compromised endpoints.