CVE-2025-26658

Summary

CVE-2025-26658 is a vulnerability affecting the Service Layer in SAP Business One. This issue enables unauthorized access and impersonation of other users, allowing attackers to perform actions they shouldn't be able to. The vulnerability is due to improper session management, permitting elevation of privileges and data manipulation. While gaining authenticated sessions of other users requires significant effort, the consequences are severe, with high impacts on the confidentiality and integrity of the application, and no effect on its availability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.