CVE-2025-26661

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Mar 11, 2025

CWE ID 862

Summary

CVE-2025-26661 is a vulnerability affecting SAP NetWeaver's ABAP Class Builder. The issue arises due to a missing authorization check, which enables attackers to bypass access restrictions and gain elevated privileges. Successful exploitation of this vulnerability could lead to the disclosure of highly sensitive information, posing a significant risk to an organization's data confidentiality. Furthermore, the escalation of privileges may adversely impact the application's integrity and availability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

SAP Net Weaver

Affected Vendors

SAP SE

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/3TzsXE
https://www.cve.org/CVERecord?id=CVE-2025-26661
https://nvd.nist.gov/vuln/detail/CVE-2025-26661

Back to Vulnerability Database

Platform Features

Products

Use Cases

Teams

Industries

Services

Measuring the US-China AI Gap

TerraStealerV2 and TerraLogger: Golden Chickens' New Malware Families Discovered

Uncovering MintsLoader With Recorded Future Malware Intelligence Hunting

Know What Matters

For Customers

For Partners