CRITICAL 9.9 NVD

CVE-2026-76965

SAP NetWeaver Application Server ABAP and ABAP Platform does not perform necessary authorization checks for certain internal functionality. An attacker with low

SAP NetWeaver Application Server ABAP and ABAP Platform does not perform necessary authorization checks for certain internal functionality. An attacker with low privileges could invoke affected functionality to execute arbitrary operating system commands on the underlying host. Successful exploitation could impact resources beyond the vulnerable component, resulting in a high impact on confidentiality, integrity and availability of the system.

References

Published: 2026-11-10 · Source: NVD · Feed updated: 2026-11-10

This critical severity vulnerability with a CVSS score of 9.9 was published on 2026-11-10 via NVD.

Risk Timeline

CVE Disclosed2026-11-10 · -1 days ago

Remediation Resources

Official Advisory

url.sap/sapsecuritypatchday

Analysis & PoC

me.sap.com/notes/3792735

vulnfeed aggregates 17092 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.