CVE-2026-76963: sap_se sap netweaver and abap platform Missing Authorization

Vulnerability summary

CVE-2026-76963 is a medium (CVSS 4.3) Missing Authorization vulnerability in sap_se sap netweaver and abap platform. EPSS estimates a 0.28% chance of exploitation in the next 30 days, higher than 19.4% of scored vulnerabilities.

Timeline

1. 08-09-2026
   PublishedVulnerability first disclosed.
2. 08-09-2026
   Last modifiedVulnerability information updated.

Description

Due to a missing authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform, an authenticated attacker could gain unauthorized access to sensitive system configuration information. Successful exploitation could result in exposure of security relevant settings and internal system details, resulting in low impact on confidentiality while integrity and availability remain unaffected.

• CWE-862Missing AuthorizationThe product does not perform an authorization check when an actor attempts to access a resource or perform an action.