CVE-2026-76963
published 2026-09-08CVE-2026-76963: Due to a missing authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform, an authenticated attacker could gain unauthorized access to…
PriorityP425medium4.3CVSS 3.1
AVNACLPRLUINSUCLINAN
EPSS
0.28%
20.4th percentile
Due to a missing authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform, an authenticated attacker could gain unauthorized access to sensitive system configuration information. Successful exploitation could result in exposure of security relevant settings and internal system details, resulting in low impact on confidentiality while integrity and availability remain unaffected.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sap_se | sap_netweaver_and_abap_platform | — | — |
| sap_se | sap_netweaver_and_abap_platform | — | — |
| sap_se | sap_netweaver_and_abap_platform | — | — |
| sap_se | sap_netweaver_and_abap_platform | — | — |
| sap_se | sap_netweaver_and_abap_platform | — | — |
| sap_se | sap_netweaver_and_abap_platform | — | — |
| sap_se | sap_netweaver_and_abap_platform | — | — |
| sap_se | sap_netweaver_and_abap_platform | — | — |
| sap_se | sap_netweaver_and_abap_platform | — | — |
| sap_se | sap_netweaver_and_abap_platform | — | — |
| sap_se | sap_netweaver_and_abap_platform | — | — |
| sap_se | sap_netweaver_and_abap_platform | — | — |
| sap_se | sap_netweaver_and_abap_platform | — | — |
| sap_se | sap_netweaver_and_abap_platform | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
SAP ABAP Platform/NetWeaver SAP_BASIS 700 up to SAP_BASIS 757 improper authorization
vuldb·2026-09-08·CVSS 4.3
CVE-2026-76963 [MEDIUM] SAP ABAP Platform/NetWeaver SAP_BASIS 700 up to SAP_BASIS 757 improper authorization
A vulnerability labeled as problematic has been found in SAP ABAP Platform and NetWeaver. Affected by this vulnerability is an unknown functionality. The manipulation results in improper authorization.
This vulnerability is identified as CVE-2026-76963. The attack can be executed remotely. There is not any exploit available.
GHSA
Due to a missing authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform, an authenticated attacker could gain unauthorized access to sensitive system configuration informati
ghsa_unreviewed·2026-09-08
CVE-2026-76963 [MEDIUM] CWE-862 Due to a missing authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform, an authenticated attacker could gain unauthorized access to sensitive system configuration informati
Due to a missing authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform, an authenticated attacker could gain unauthorized access to sensitive system configuration information. Successful exploitation could result in exposure of security relevant settings and internal system details, resulting in low impact on confidentiality while integrity and availability remain unaffected.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-09-08
Published