Skip to content
OpenAdvisories
High · 7.5 CVE-2026-76970 EUVD-2026-120659GHSA-qgfx-vp5g-mrq7

Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform

Published Nov 10, 2026 · Updated Nov 12, 2026 · Assigned by sap

Description

Due to a Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform, an unauthenticated attacker could send specially crafted requests to the application. If processed by the application, these requests could trigger a memory corruption condition in the parsing routine, which could cause the affected processes to crash and restart. By repeatedly sending such requests, the attacker could cause a sustained denial of service, leading to a high impact on availability. Confidentiality and integrity remain unaffected.

Affected products

VendorProductAffectedFixed
SAP_SE SAP NetWeaver and ABAP Platform KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.22EX2, 7.22EX3, 7.53, 7.54, 7.77, 7.93, 8.04, 9.16, 9.18, 9.20, 9.21, KERNEL 7.22 —

Advisories 2

References