CVE-2026-58243: Privilege Escalation vulnerability in SAP ABAP Developer Tools

Published Aug 11, 2026

Updated

SAP ABAP Development Tools does not perform necessary authorization checks for certain functionality, allowing an attacker with low privileges to execute unauthorized database operations against SAP NetWeaver AS ABAP. Successful exploitation could allow the attacker to read sensitive data, modify application data, and disrupt access for legitimate users, resulting in high impact on confidentiality, integrity, and availability.

Affected Software

2 affected components

SAP SAP ABAP Development Tools

SAP SAP NetWeaver AS ABAP

Event History

Aug 11, 2026

CVE Published

via MITRE·12:16 AM

Data Sourced

via MITRE·12:16 AM

DescriptionSeverity

Data Sourced

via NVD·01:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-58243?

CVE-2026-58243 has a high severity score of 8.8.

What type of vulnerability is CVE-2026-58243?

CVE-2026-58243 is a Privilege Escalation vulnerability in SAP ABAP Developer Tools.

How does CVE-2026-58243 affect SAP systems?

CVE-2026-58243 allows an attacker with low privileges to execute unauthorized database operations on SAP NetWeaver AS ABAP.

Can CVE-2026-58243 lead to data leaks?

Yes, successful exploitation of CVE-2026-58243 could allow an attacker to read sensitive data.

How can I mitigate the risks of CVE-2026-58243?

To mitigate the risks of CVE-2026-58243, apply the necessary security patches provided by SAP.