VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Feb 10, 2026· Updated Jun 17, 2026

CVE-2026-0484

CVE-2026-0484

Description

Due to missing authorization check in SAP NetWeaver Application Server ABAP and SAP S/4HANA, an authenticated attacker could access a specific transaction code and modify the text data in the system. This vulnerability has a high impact on integrity of the application with no effect on the confidentiality and availability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

18
  • SAP/BASIS15 versions
    cpe:2.3:a:sap:sap_basis:700:*:*:*:*:*:*:*+ 14 more
    • cpe:2.3:a:sap:sap_basis:700:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:sap_basis:701:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:sap_basis:702:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:sap_basis:731:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:sap_basis:740:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:sap_basis:750:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:sap_basis:751:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:sap_basis:752:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:sap_basis:753:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:sap_basis:754:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:sap_basis:755:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:sap_basis:756:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:sap_basis:757:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:sap_basis:758:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:sap_basis:816:*:*:*:*:*:*:*
  • SAP/NetWeaver Application Server for ABAPllm-fuzzy
  • SAP/S/4HANAllm-fuzzy
  • SAP/Sap Web Application Servercpe-rescue
    Range: SAP_BASIS 700

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.