VYPR
← All advisories
Medium severity5.0NVD Advisory· Published Mar 10, 2026· Updated Jun 17, 2026

CVE-2026-27688

CVE-2026-27688

Description

Due to a missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker with user privileges could read Database Analyzer Log Files via a specific RFC function module. The attacker with the necessary privileges to execute this function module could potentially escalate their privileges and read the sensitive data, resulting in a limited impact on the confidentiality of the information stored. However, the integrity and availability of the system are not affected.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

18
  • SAP/NetWeaver Application Server for ABAPllm-fuzzy17 versions
    (expand)+ 16 more
    • (no CPE)
    • cpe:2.3:a:sap:netweaver_application_server_abap:700:*:*:*:sap_basis:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:701:*:*:*:sap_basis:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:702:*:*:*:sap_basis:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:730:*:*:*:sap_basis:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:731:*:*:*:sap_basis:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:sap_basis:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:sap_basis:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:751:*:*:*:sap_basis:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:752:*:*:*:sap_basis:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:753:*:*:*:sap_basis:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:754:*:*:*:sap_basis:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:755:*:*:*:sap_basis:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:756:*:*:*:sap_basis:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:757:*:*:*:sap_basis:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:758:*:*:*:sap_basis:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:816:*:*:*:sap_basis:*:*:*
  • SAP/Sap Web Application Servercpe-rescue
    Range: SAP_BASIS 700

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.