CVE record · 1 source
CVE-2026-89120
CVSS 7.1A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorization weakness.
- Vendor
- SAP
- Product
- NetWeaver
- CVSS
- 7.1
- EPSS
- 0.002 (p15)
- Exposure class
- Web platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorization weakness.
A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorization weakness. The session manager can be opened in single transaction mode, including from FLP. A low-privileged attacker could…