SAP patches critical S/4HANA flaw which allowed full system takeover Attackers can inject ABAP code and bypass authorization ...

A critical SAP S/4HANA code injection flaw tracked as CVE-2025-42957 and allowing full system takeover has been exploited in ...

Attackers are now abusing a critical vulnerability in SAP's S/4HANA. A patch from the August patchday closes it.