SAP NetWeaver Application Server ABAP does not sufficiently validate certain network input processed by an internal component.
SAP NetWeaver Application Server ABAP does not sufficiently validate certain network input processed by an internal component. An unauthenticated attacker could send specially crafted network traffic to trigger a memory corruption condition in the affected functionality. Successful exploitation could allow the attacker to execute arbitrary code and fully compromise the system, resulting in a high impact on confidentiality, integrity and availability of the system.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- SAP_SE
- Product
- SAP NetWeaver AS ABAP (Internet Communication Manager)
- CVSS v3.1
- 10.0 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
- Weakness
- CWE-1287
- Exposure class
- Web platform
- NVD status
- Received
Why it ranks 44 (Notable)
- CVSS v3.1 10.0 critical
- Product class: web platform
- Widely deployed vendor product (SAP_SE)
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-76964 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.