← CVE Intelligence

CVE-2026-76963

Missing Authorization Check in Application Server ABAP of SAP NetWeaver and ABAP Platform PUBLISHED

Description (CNA)

Due to a missing authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform, an authenticated attacker could gain unauthorized access to sensitive system configuration information. Successful exploitation could result in exposure of security relevant settings and internal system details, resulting in low impact on confidentiality while integrity and availability remain unaffected.

Affected (CNA)

Vendor / productVersions
SAP_SE / SAP NetWeaver and ABAP Platformaffected SAP_BASIS 700; affected SAP_BASIS 701; affected SAP_BASIS 702; affected SAP_BASIS 731; affected SAP_BASIS 740; affected SAP_BASIS 750; affected SAP_BASIS 751; affected SAP_BASIS 752; affected SAP_BASIS 753; affected SAP_BASIS 754; affected SAP_BASIS 755; affected SAP_BASIS 756; affected SAP_BASIS 757; affected SAP_BASIS 758

CWE

CWE-862

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.