CVE-2026-58243 — Privilege Escalation vulnerability in SAP ABAP Developer Tools

Description (CNA)

SAP ABAP Development Tools does not perform necessary authorization checks for certain functionality, allowing an attacker with low privileges to execute unauthorized database operations against SAP NetWeaver AS ABAP. Successful exploitation could allow the attacker to read sensitive data, modify application data, and disrupt access for legitimate users, resulting in high impact on confidentiality, integrity, and availability.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP ABAP Developer Tools	affected SAP_BASIS 750; affected SAP_BASIS 751; affected SAP_BASIS 752; affected SAP_BASIS 753; affected SAP_BASIS 754; affected SAP_BASIS 755; affected SAP_BASIS 756; affected SAP_BASIS 757; affected SAP_BASIS 758; affected SAP_BASIS 816; affected SAP_BASIS 918; affected SAP_BASIS 920

CWE

CWE-862

References

https://me.sap.com/notes/3772411
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.