SecurityBridge warned that CVE-2025-42957 allowed hackers with small process rights to mount “an entire program compromise with minimal effort necessary, the place successful exploitation can easily lead to fraud, facts theft, espionage, or the installation of ransomware.” "Even though common exploitation hasn't however been documented, SecurityBridge has verified actual abuse https://www.ecom-group.com/training-events/sap-tm-charges-and-settlement-in-sap-s-4hana-tm-s4tm3/