Authentication Bypass Vulnerability in SAP NetWeaver AS ABAP by SAP

CVE-2026-120017

What is CVE-2026-120017?

The SAP NetWeaver AS ABAP and ABAP Platform is susceptible to an authentication bypass vulnerability due to insufficient verification of incoming authentication assertions in specific configurations. This flaw allows an unauthenticated attacker to exploit the system by submitting specially crafted data that can circumvent authentication processes. As a result, attackers can impersonate legitimate users, including users with elevated privileges. The consequences of this exploitation can lead to significant impacts on the confidentiality, integrity, and availability of not only the affected application but also its connected components and systems.

References