Medium severity6.5NVD Advisory· Published Sep 8, 2026· Updated Sep 8, 2026
CVE-2026-76971
CVE-2026-76971
Description
Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could cause the server to initiate arbitrary outbound requests. If processed by the application, this behavior could be combined with XML/XSL processing to enable execution of scripts. Successful exploitation could result in a low impact on the confidentiality, integrity, and availability of the application.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
2News mentions
1- SAP Security Updates September 2026 – Critical Flaws Patched in SAP NetWeaver, Cloud and Extended PassportCyber Security News · Sep 8, 2026