Insufficient Validation Vulnerability in SAP NetWeaver Business Client

CVE-2026-76967

What is CVE-2026-76967?

The SAP NetWeaver Business Client is susceptible to a vulnerability that arises from inadequate validation during the processing of locally stored data upon application startup. This flaw allows an attacker with local system access to replace critical data with maliciously crafted content. When the application is subsequently launched, this modified content is executed, posing a serious threat by enabling arbitrary code execution in the context of the user. Consequently, this vulnerability undermines the confidentiality, integrity, and availability of the application, highlighting the need for urgent review and remediation.

References