CVE-2025-26655

—

CVSS 3.1

3.1 low

EPSS

<1%p12

Published

Mar 11, 2025 (Mar 11, 2025)

Modified

Jun 17, 2026

Description

SAP Just In Time(JIT) does not perform necessary authorization checks for an authenticated user, allowing attacker to escalate privileges that would otherwise be restricted, potentially causing a low impact on the integrity of the application.Confidentiality and Availability are not impacted.

Weakness: CWE-862
Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.