critical9.6
CVE-2026-0509
SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated, low-privileged user to perform background Remote Function Calls without the re…
Impact
SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated, low-privileged user to perform background Remote Function Calls without the required S_RFC authorization in certain cases. This can result in a high impact on integrity and availability, and no impact on the confidentiality of the application.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Netweaver As Abap Kernel | Versions 7.22, 7.53, 7.54, 7.77, 7.89, 7.93 |
| Sap | Netweaver As Abap Krnl64nuc | Versions 7.22, 7.22ext |
| Sap | Netweaver As Abap Krnl64uc | Versions 7.22, 7.22ext, 7.53 |