Attack Groups CL-STA-0048: China-Nexus Espionage Cluster August 15, 2026 ♡Follow0 CL-STA-0048 is a China-nexus espionage cluster that has been linked to the exploitation of SAP NetWeaver vulnerabilities, including CVE-2025-31324. Discovered from: SAP Commerce Cloud CVE-2026-58231 Exploited in the Wild Days After Patch ChinaCL-STA-0048espionageSAP