CVE record · 1 source
CVE-2026-76966
CVSS 8.9Due to improper RFC protocol validation in the SAP Kernel used by the Application Server ABAP of SAP NetWeaver and ABAP Platform, an unauthenticated…
- Vendor
- SAP_SE
- Product
- SAP NetWeaver and ABAP Platform
- CVSS v3.1
- 8.9 AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L
- Weakness
- CWE-294
- Exposure class
- Web platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Due to improper RFC protocol validation in the SAP Kernel used by the Application Server ABAP of SAP NetWeaver and ABAP Platform, an unauthenticated…
Due to improper RFC protocol validation in the SAP Kernel used by the Application Server ABAP of SAP NetWeaver and ABAP Platform, an unauthenticated attacker can send a crafted RFC request that exploits logical errors in memory…