Over this past weekend I saw 2 social media posts on a "zero-day" vulnerability. As usual with bad news, it dropped when many people may not be on the office network. I am curious who has seen this news, how they found it, and whether they escalated/responded. Don't post with "we're on X version" or whatever, just if you knew/know.
"SAP has released an out-of-band emergency update to fix a critical zero-day vulnerability (CVE-2025-31324) in NetWeaver Visual Composer — and it’s already being exploited in the wild." [source: https://infosec.exchange/@Efani/114405113950458290 ]
See: SAP Security Note 3594142
