Bug in SAP's S/4 HANA exploited in the wild, rated critical CVSS 9.9