Authorization Flaw in SAP NetWeaver Application Server for ABAP

CVE-2026-24310

What is CVE-2026-24310?

An authorization check bypass vulnerability exists within the SAP NetWeaver Application Server for ABAP. This flaw allows an authenticated attacker to execute specific ABAP function modules, which can result in unauthorized access to sensitive information stored in the database catalog. While this does not compromise the integrity or availability of the application, it poses a significant risk to data confidentiality, as it enables potential data exposure. This vulnerability highlights the necessity for robust access control measures within the ABAP environment to protect sensitive data from unauthorized access.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References