HIGH

CVE-2026-58243

2026-08-11 CVSS v3.1

CVSS

8.8

Description

SAP ABAP Development Tools does not perform necessary authorization checks for certain functionality, allowing an attacker with low privileges to execute unauthorized database operations against SAP NetWeaver AS ABAP. Successful exploitation could allow the attacker to read sensitive data, modify application data, and disrupt access for legitimate users, resulting in high impact on confidentiality, integrity, and availability.

Weakness (CWE)

CWE-862 Missing Authorization

EPSS Score

0.33%

Probability of exploitation in next 30 days

26.4th percentile

References

https://me.sap.com/notes/3772411 https://url.sap/sapsecuritypatchday

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE