#sap-security-patch-day
9 articles
CVE-2026-109795: Code Injection via Remote-Enabled Function in SAP NetWeaver
Missing authorization checks and input validation in a remote-enabled function of SAP NetWeaver let a low-privileged attacker inject and execute arbitrary code. Fixed in SAP Note 3834842...
CVE-2026-109798: XXE in SAP BusinessObjects BI Platform (Web Intelligence)
Web Intelligence in SAP BusinessObjects BI Platform does not restrict XML external entity resolution in OLAP connection requests. An authenticated attacker can read server files and reach internal systems...
CVE-2026-109803: Code Execution via XSLT in SAP NetWeaver Knowledge Management
SAP NetWeaver Knowledge Management (XML Forms) does not restrict the selection of XSL transformations. An authenticated user can force an unauthorized transformation and execute arbitrary code in the application context...
CVE-2026-120017: Authentication Bypass in SAP NetWeaver AS ABAP
In certain configurations SAP NetWeaver AS ABAP and ABAP Platform do not sufficiently verify incoming authentication assertions. An unauthenticated attacker can impersonate any user, including privileged accounts...
CVE-2026-76964: Unauthenticated Memory Corruption RCE in SAP NetWeaver AS ABAP
An internal component of SAP NetWeaver AS ABAP does not validate certain network input. An unauthenticated attacker can send crafted traffic to corrupt memory, execute arbitrary code and take over the system...
CVE-2026-76965: Missing Authorization Allows OS Commands in SAP NetWeaver ABAP
SAP NetWeaver AS ABAP and ABAP Platform do not perform authorization checks for certain internal functionality. A low-privileged attacker can execute arbitrary operating system commands on the host...
CVE-2026-89103: Overly Permissive Default Access Control List in SAP Gateway
SAP Gateway activates a default Access Control List with high privileges, so an external attacker can be categorized as an internal application server and perform actions without authentication...
CVE-2026-89119: CSRF in Admin Functions of SAP Web Dispatcher and ICM
SAP Web Dispatcher and the ICM of SAP NetWeaver AS ABAP do not validate requests in some administrative functions. A link opened by a logged-on administrator can lead to full compromise of the operating system...
CVE-2026-89126: Unauthenticated Heap Overflow RCE in SAP Web Dispatcher
An internal component of SAP Web Dispatcher does not validate certain network input. An unauthenticated attacker can send crafted traffic to corrupt memory, execute arbitrary code and take over the system...