← CVE Intelligence

CVE-2026-0509

Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform PUBLISHED

Description (CNA)

SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated, low-privileged user to perform background Remote Function Calls without the required S_RFC authorization in certain cases. This can result in a high impact on integrity and availability, and no impact on the confidentiality of the application.

Affected (CNA)

Vendor / productVersions
SAP_SE / SAP NetWeaver Application Server ABAP and ABAP Platformaffected KRNL64NUC 7.22; affected 7.22EXT; affected KRNL64UC 7.22; affected 7.53; affected KERNEL 7.22; affected 7.54; affected 7.77; affected 7.89; affected 7.93; affected 9.16; affected 9.18; affected 9.19

CWE

CWE-862

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.