Privilege Escalation Vulnerability in SAP Just In Time by SAP
CVE-2025-26655
What is CVE-2025-26655?
The SAP Just In Time product contains a vulnerability where it fails to enforce proper authorization checks for authenticated users. This flaw allows an attacker to gain elevated privileges that are normally restricted, which could potentially compromise the integrity of the application. It is important to note that this vulnerability does not impact the confidentiality or availability of the system. Organizations using SAP Just In Time should ensure they are aware of this issue and apply necessary mitigations as outlined in the official SAP security notes.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
SAP Just In Time S4CORE 102
SAP Just In Time 103
SAP Just In Time 104
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved