Authorization Bypass in SAP NetWeaver by SAP

CVE-2026-76963

What is CVE-2026-76963?

An authorization check bypass vulnerability exists in the Application Server ABAP of SAP NetWeaver and ABAP Platform. An authenticated attacker can exploit this flaw to access sensitive system configuration information without proper authorization. While the exploitation leads to exposure of security-relevant settings and internal system details, it does not compromise the integrity or availability of the system. This risk emphasizes the need for proper access controls and regular security audits.

References