Server-Side Request Forgery Vulnerability in SAP NetWeaver Application Server for ABAP

CVE-2026-24316

What is CVE-2026-24316?

The SAP NetWeaver Application Server for ABAP includes an ABAP Report designed for testing that is susceptible to Server-Side Request Forgery (SSRF). This vulnerability enables unauthorized HTTP requests to be sent to internal or external endpoints, potentially allowing attackers to interact with sensitive internal resources. While this could compromise data confidentiality and integrity, the application's availability remains unaffected.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References