A zero-day vulnerability in SAP NetWeaver may impact over 10,000 internet-facing applications, potentially exploited by an initial access broker, according to SecurityWeek.