SecurityBridge warned that CVE-2025-42957 permitted hackers with small process rights to mount “a complete system compromise with negligible effort and hard work required, in which thriving exploitation can easily result in fraud, information theft, espionage, or the set up of ransomware.” "Though widespread exploitation has not yet been reported, SecurityBridge https://www.ecom-group.com/training-events/sap-tm-charges-and-settlement-in-sap-s-4hana-tm-s4tm3/