Unrated severityNVD Advisory· Published Feb 10, 2026· Updated Feb 10, 2026

Missing Authorization check in SAP NetWeaver Application Server ABAP and SAP S/4HANA

CVE-2026-0484

Description

Due to missing authorization check in SAP NetWeaver Application Server ABAP and SAP S/4HANA, an authenticated attacker could access a specific transaction code and modify the text data in the system. This vulnerability has a high impact on integrity of the application with no effect on the confidentiality and availability.

Affected products

SAP/Netweaver Abap Application Serverllm-fuzzy
SAP/S/4HANAllm-fuzzy
SAP_SE/SAP NetWeaver Application Server ABAP and SAP S/4HANAv5
Range: SAP_BASIS 700

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

me.sap.com/notes/3672622mitre
url.sap/sapsecuritypatchdaymitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000