CVE-2025-42958 – Missing Authentication check in SAP NetWeaver

CVE ID : CVE-2025-42958

Published : Sept. 9, 2025, 2:15 a.m. | 39 minutes ago

Description : Due to a missing authentication check in the SAP NetWeaver application on IBM i-series, the application allows high privileged unauthorized users to read, modify, or delete sensitive information, as well as access administrative or privileged functionalities. This results in a high impact on the confidentiality, integrity, and availability of the application.

Severity: 9.1 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…