Skip to content
OpenAdvisories
High · 7.5 CVE-2026-76973 EUVD-2026-120661GHSA-pxgr-w4x8-28hc

Memory Corruption vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform (SAP Message Server)

Published Nov 10, 2026 · Updated Nov 12, 2026 · Assigned by sap

Description

Due to a Memory Corruption vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform, an unauthenticated attacker could send specially crafted network requests to the affected service. By triggering the vulnerability, the attacker could cause the server to crash and disrupt active connections, leading to a denial of service condition. Successful exploitation could result in a high impact to the availability while the confidentiality and integrity remains unaffected.

Affected products

VendorProductAffectedFixed
SAP_SE SAP NetWeaver and ABAP Platform (SAP Message Server) KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.53, 8.04, KERNEL 7.22, 7.54, 7.77, 7.93, 9.16, 9.18, 9.20, 9.21 —

Advisories 2

References