CVE-2026-44751: Missing Authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform
Application server ABAP does not perform necessary authorization checks for an authenticated user allowing an attacker to execute a report generation command which could overwrite information belonging to another user, resulting in escalation of privileges. This has high impact on integrity with low impact on availability and no impact on confidentiality of the application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-44751?
The severity of CVE-2026-44751 is high, rated at 7.1 on the CVSS scale.
How do I fix CVE-2026-44751?
To fix CVE-2026-44751, apply the latest security patches provided by SAP for the affected versions of the SAP NetWeaver Application Server ABAP or ABAP Platform.
What impact does CVE-2026-44751 have?
CVE-2026-44751 can lead to high impact on the integrity of the system by allowing unauthorized report generation that can alter user information.
Which systems are affected by CVE-2026-44751?
CVE-2026-44751 affects the SAP NetWeaver Application Server ABAP and the SAP ABAP Platform Application Server.
What does the vulnerability in CVE-2026-44751 allow an attacker to do?
The vulnerability in CVE-2026-44751 allows an attacker to execute commands that could overwrite information belonging to another authenticated user.