Improper Input Handling Vulnerability in SAP NetWeaver Application Server ABAP

CVE-2026-27680

What is CVE-2026-27680?

A security flaw in the SAP NetWeaver Application Server ABAP allows attackers to exploit improper input handling, enabling the injection of malicious Cascading Style Sheets (CSS) into web pages served by the application. This can lead to unauthorized execution of the injected CSS when users access affected pages, potentially compromising the user experience. While the issue specifically affects the integrity of the web content, it does not have a significant impact on confidentiality or availability.

References