{"id":"EUVD-2026-120656","enisaUuid":"fa953029-0239-3f69-8546-56a2888fe8ae","description":"SAP NetWeaver Application Server ABAP does not sufficiently validate certain network input processed by an internal component. An unauthenticated attacker could send specially crafted network traffic to trigger a memory corruption condition in the affected functionality. Successful exploitation could allow the attacker to execute arbitrary code and fully compromise the system, resulting in a high impact on confidentiality, integrity and availability of the system.","datePublished":"Nov 10, 2026, 12:17:07 AM","dateUpdated":"Nov 10, 2026, 12:17:07 AM","baseScore":10.0,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","references":"https://me.sap.com/notes/3778530\nhttps://url.sap/sapsecuritypatchday\n","aliases":"CVE-2026-76964\nGHSA-5hvr-9cj9-6mcg\n","assigner":"sap","epss":0.0,"enisaIdProduct":[{"id":"2b73a67f-2d06-31cb-8781-7b78f7c7a340","product":{"name":"SAP NetWeaver AS ABAP (Internet Communication Manager)","vendor":{"name":"SAP_SE"}},"product_version":"9.16"},{"id":"36ff9aef-2fa1-3e95-8ee5-99aa71268268","product":{"name":"SAP NetWeaver AS ABAP (Internet Communication Manager)","vendor":{"name":"SAP_SE"}},"product_version":"9.18"},{"id":"ae061a78-b8f8-3cfb-90ef-14afd26185e4","product":{"name":"SAP NetWeaver AS ABAP (Internet Communication Manager)","vendor":{"name":"SAP_SE"}},"product_version":"KERNEL 7.53"},{"id":"b7887cbd-0acc-30c3-85a8-e1240791e7dd","product":{"name":"SAP NetWeaver AS ABAP (Internet Communication Manager)","vendor":{"name":"SAP_SE"}},"product_version":"7.77"},{"id":"b825763d-293c-3ac2-8cff-0d44b199c6ec","product":{"name":"SAP NetWeaver AS ABAP (Internet Communication Manager)","vendor":{"name":"SAP_SE"}},"product_version":"9.20"},{"id":"bdb321ec-e590-36e8-bed9-8e9a94fc024b","product":{"name":"SAP NetWeaver AS ABAP (Internet Communication Manager)","vendor":{"name":"SAP_SE"}},"product_version":"KRNL64UC 7.53"},{"id":"d4d10cc5-7ff6-369f-9af7-8423a07a2ed9","product":{"name":"SAP NetWeaver AS ABAP (Internet Communication Manager)","vendor":{"name":"SAP_SE"}},"product_version":"7.93"},{"id":"f4327360-0337-376f-94dd-02e3bfbbb6b5","product":{"name":"SAP NetWeaver AS ABAP (Internet Communication Manager)","vendor":{"name":"SAP_SE"}},"product_version":"7.54"}],"enisaIdVendor":[{"id":"93774744-2e96-339c-aee6-439c1f9d5f30","vendor":{"name":"SAP_SE"}}],"enisaIdVulnerability":[{"id":"504efee5-cc9b-347e-a34a-23543ba71ee8","vulnerability":{"id":"GHSA-5hvr-9cj9-6mcg","description":"SAP NetWeaver Application Server ABAP does not sufficiently validate certain network input processed by an internal component. An unauthenticated attacker could send specially crafted network traffic to trigger a memory corruption condition in the affected functionality. Successful exploitation could allow the attacker to execute arbitrary code and fully compromise the system, resulting in a high impact on confidentiality, integrity and availability of the system.","datePublished":"Nov 10, 2026, 3:30:33 AM","dateUpdated":"Nov 10, 2026, 3:30:33 AM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2026-76964\nhttps://me.sap.com/notes/3778530\nhttps://url.sap/sapsecuritypatchday\n","enisa_id":"EUVD-2026-120656\n","aliases":"GHSA-5hvr-9cj9-6mcg\nCVE-2026-76964\n","epss":0.0,"dataProcessed":"Nov 10, 2026, 8:01:41 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"c7fd0b57-e8d0-3607-b9da-53e8d6054dde","vulnerability":{"id":"CVE-2026-76964","description":"SAP NetWeaver Application Server ABAP does not sufficiently validate certain network input processed by an internal component. An unauthenticated attacker could send specially crafted network traffic to trigger a memory corruption condition in the affected functionality. Successful exploitation could allow the attacker to execute arbitrary code and fully compromise the system, resulting in a high impact on confidentiality, integrity and availability of the system.","datePublished":"Nov 10, 2026, 12:17:07 AM","dateUpdated":"Nov 10, 2026, 12:17:07 AM","status":"PUBLISHED","baseScore":10.0,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","references":"https://me.sap.com/notes/3778530\nhttps://url.sap/sapsecuritypatchday\n","enisa_id":"EUVD-2026-120656\n","assigner":"sap","epss":0.0,"dataProcessed":"Nov 10, 2026, 8:00:17 AM","vulnerabilityProduct":[{"id":"1ff87296-1f99-3956-ba32-1729c1040a04","product":{"name":"SAP NetWeaver AS ABAP (Internet Communication Manager)","vendor":{"name":"SAP_SE"}},"product_version":"9.18"},{"id":"24625534-0e02-392e-bf0b-30d9892c4f5c","product":{"name":"SAP NetWeaver AS ABAP (Internet Communication Manager)","vendor":{"name":"SAP_SE"}},"product_version":"7.77"},{"id":"259005d8-a818-3b1a-8f28-d0c4cfac7318","product":{"name":"SAP NetWeaver AS ABAP (Internet Communication Manager)","vendor":{"name":"SAP_SE"}},"product_version":"KRNL64UC 7.53"},{"id":"8b174038-9958-3d07-a9a7-cee23b515445","product":{"name":"SAP NetWeaver AS ABAP (Internet Communication Manager)","vendor":{"name":"SAP_SE"}},"product_version":"7.54"},{"id":"a95977ed-082b-3309-a5e5-e3c6ae734b42","product":{"name":"SAP NetWeaver AS ABAP (Internet Communication Manager)","vendor":{"name":"SAP_SE"}},"product_version":"7.93"},{"id":"beabc341-a9fe-3178-a523-e478212a9001","product":{"name":"SAP NetWeaver AS ABAP (Internet Communication Manager)","vendor":{"name":"SAP_SE"}},"product_version":"KERNEL 7.53"},{"id":"ca3b72ed-ac4a-366f-985e-bd87eb514513","product":{"name":"SAP NetWeaver AS ABAP (Internet Communication Manager)","vendor":{"name":"SAP_SE"}},"product_version":"9.16"},{"id":"ef3e0423-f922-3242-91b7-a82999dc6e1b","product":{"name":"SAP NetWeaver AS ABAP (Internet Communication Manager)","vendor":{"name":"SAP_SE"}},"product_version":"9.20"}],"vulnerabilityVendor":[{"id":"87082f9e-586c-3aef-be63-ec6ef91c53e5","vendor":{"name":"SAP_SE"}}]}}],"enisaIdAdvisory":[]}