What’s Vulnerable › Vulnerabilities

CVE-2026-58243: Privilege Escalation vulnerability in SAP ABAP Developer Tools

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-11 · updated 2026-10-24
• Weakness: CWE-862

Description

SAP ABAP Development Tools does not perform necessary authorization checks for certain functionality, allowing an attacker with low privileges to execute unauthorized database operations against SAP NetWeaver AS ABAP. Successful exploitation could allow the attacker to read sensitive data, modify application data, and disrupt access for legitimate users, resulting in high impact on confidentiality, integrity, and availability.

Affected products

• SAP_SE SAP ABAP Developer Tools: SAP_BASIS 750, SAP_BASIS 751, SAP_BASIS 752, SAP_BASIS 753, SAP_BASIS 754, SAP_BASIS 755 (+6)

References

• https://me.sap.com/notes/3772411
• https://url.sap/sapsecuritypatchday

Get alerted when CVE-2026-58243 or the next vulnerability affects your stack