CVE-2026-76965
Received Received - Intake

SAP NetWeaver ABAP Platform OS Command Injection

Publication date: 2026-11-10

Last updated on: 2026-11-10

Assigner: SAP SE

Description
SAP NetWeaver Application Server ABAP and ABAP Platform does not perform necessary authorization checks for certain internal functionality. An attacker with low privileges could invoke affected functionality to execute arbitrary operating system commands on the underlying host. Successful exploitation could impact resources beyond the vulnerable component, resulting in a high impact on confidentiality, integrity and availability of the system.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-10
Last Modified
2026-11-10
Generated
2026-11-10
AI Q&A
2026-11-10
EPSS Evaluated
N/A
NVD
CVE-2026-76965
EUVD
EUVD-2026-120657

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
sap netweaver_application_server_abap *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-749 The product provides an Applications Programming Interface (API) or similar interface for interaction with external actors, but the interface includes a dangerous method or function that is not properly restricted.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

SAP NetWeaver Application Server ABAP and ABAP Platform lacks proper authorization checks for certain internal functions. An attacker with low privileges can exploit this to run arbitrary operating system commands on the host system. This could lead to significant compromise of system resources.

Detection Guidance

Detecting this vulnerability requires checking for unauthorized OS command execution in SAP NetWeaver Application Server ABAP. Monitor system logs for unusual commands or privilege escalation attempts. Use SAP transaction SM19/SM20 to review security audit logs for suspicious activity. Check for unauthorized RFC function module calls that may indicate exploitation attempts.

Impact Analysis

This vulnerability allows attackers to execute arbitrary commands on the underlying host, potentially leading to full system compromise. It can impact confidentiality, integrity, and availability of the system and resources beyond the vulnerable component.

Compliance Impact

This vulnerability allows attackers with low privileges to execute arbitrary operating system commands, potentially leading to unauthorized access, data breaches, or system compromise. Such impacts could violate GDPR's data protection requirements or HIPAA's security rules, depending on the compromised system's data.

Mitigation Strategies

Apply the latest security patches from SAP as soon as possible. Restrict user privileges to the minimum required. Monitor system logs for unusual activity and unauthorized command execution attempts.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-76965. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...