Description
SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated, low-privileged user to perform background Remote Function Calls without the required S_RFC authorization in certain cases. This can result in a high impact on integrity and availability, and no impact on the confidentiality of the application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP NetWeaver Application Server ABAP and ABAP Platform | KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.53, KERNEL 7.22, 7.54, 7.77, 7.89, 7.93, 9.16, 9.18, 9.19 | — |
Advisories 2
- NCSC-2026-0052 Kwetsbaarheden verholpen in SAP producten NCSC-NL (Netherlands) · Feb 10, 2026
- WID-SEC-2026-0354 SAP Patchday Februar 2026: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 9, 2026