EUVD-2026-55876

SAP ABAP Platform allows an unauthenticated user to send a specially crafted request to an internal component. This could disclose limited, non-sensitive data from previously used memory, leading to a low on confidentiality, with no impact on integrity and availability of the application...

CVE-2026-58245

CVE-2026-58245 concerns SAP Advanced Planning and Optimization (Model Mix Planning), where a hard-coded credential in the application’s source enables an attacker with HIGH privileges and no user interaction to bypass authorization and delete specific planning-related restrictions. The descriptio...

EUVD-2026-55875

SAP Advanced Planning and Optimization Model Mix Planning contains a hardcoded credential within the source code of the application to perform authorization check to access certain functionalities in the application. An attacker with high privileges could leverage this hardcoded credential to...

CVE-2026-58244

Technical details (affected components, root cause, exploitability, and remediation) are not publicly available in the provided documents. Monitor for updates.

EUVD-2026-55874

SAP Manufacturing Integration and Intelligence MII does not perform necessary authorization check on certain application function, allowing a low-privileged authenticated attacker to access information that should be restricted to privileged users. Successful exploitation could allow the attacker...

EUVD-2026-55873

SAP ABAP Development Tools does not perform necessary authorization checks for certain functionality, allowing an attacker with low privileges to execute unauthorized database operations against SAP NetWeaver AS ABAP. Successful exploitation could allow the attacker to read sensitive data, modify...

CVE-2026-58243

The CVE-2026-58243 entry concerns SAP ABAP Development Tools failing to perform necessary authorization checks for certain functionality, enabling a low-privilege attacker to perform unauthorized database operations on SAP NetWeaver AS ABAP. The issue can lead to reading and modifying sensitive d...

CVE-2026-58243 Privilege Escalation vulnerability in SAP ABAP Developer Tools

SAP ABAP Development Tools does not perform necessary authorization checks for certain functionality, allowing an attacker with low privileges to execute unauthorized database operations against SAP NetWeaver AS ABAP. Successful exploitation could allow the attacker to read sensitive data, modify...

EUVD-2026-55872

SAP NetWeaver and ABAP Platform Change and Transport System - Customer Transport Integration Wizard allows a low-privileged user to modify configuration tables that control access to data objects during specific operations. These unauthorized modifications could result in processing delays and...

CVE-2026-58241

Technical details about CVE-2026-58241 are not publicly available in the provided documents. Monitor for updates.

CVE-2026-58239

CVE-2026-58239 affects SAP Approuter in SAP Business AI Platform. The issue arises from insufficient validation of tenant context in inbound requests, allowing an unauthenticated attacker to spoof tenant context under conditions not fully within their control. This could lead to limited exposure ...

EUVD-2026-55871

SAP Approuter does not sufficiently validate tenant context in inbound requests. An unauthenticated attacker could send specially crafted requests to spoof the tenant context under conditions not fully within their control. Successful exploitation could allow limited access to another tenant's...

EUVD-2026-55870

SAP Approuter does not sufficiently handle certain requests under specific conditions. An unauthenticated attacker could send specially crafted input that causes the component to crash and restart. Successful exploitation requires specific runtime conditions to be met, making the attack complex t...

CVE-2026-58238

CVE-2026-58238 affects SAP Approuter in SAP Business AI Platform. The vulnerability arises from insufficient handling of certain requests under specific runtime conditions, allowing an unauthenticated attacker to craft input that causes the component to crash and restart. Impact is limited to ava...

EUVD-2026-55869

WebSocket of SAP Approuter does not perform sufficient authorization checks in certain functionality. An attacker with low privileges could exploit this to access restricted functionality. Successful exploitation could allow the attacker to read sensitive information and perform limited...

CVE-2026-58237

CVE-2026-58237 concerns multiple vulnerabilities in SAP Business AI Platform (Approuter). The WebSocket component allegedly fails to perform sufficient authorization checks in certain functionality, allowing a low-privileged attacker to access restricted functionality and potentially read sensiti...

CVE-2026-58236

The CVE-2026-58236 entry concerns SAP NetWeaver Application Server ABAP and ABAP Platform, where an attacker with high privileges can bypass a missing security control on an internal code path and trigger OS command execution. The impact description indicates OS-level command execution that could...

EUVD-2026-55868

SAP NetWeaver Application Server ABAP and ABAP Platform allow an attacker with high privileges to bypass missing security controls on an internal code path leading to operating system command execution. Successful exploitation could allow the attacker to execute OS-level commands that write to th...

EUVD-2026-55867

SAP NetWeaver Application Server Java Adobe Document Service uses outdated open source cryptographic and data transfer libraries that contain known vulnerabilities addressed in later versions. A low-privileged authenticated attacker could potentially leverage these weaknesses against the affected...

CVE-2026-58235

CVE-2026-58235 affects SAP NetWeaver Application Server Java (Adobe Document Service). The issue arises from use of outdated third-party cryptographic and data transfer libraries that have known weaknesses and were addressed in later versions. A low-privileged authenticated attacker could potenti...