CVE-2026-0490CWE-862

Denial of service (DOS) in SAP BusinessObjects BI Platform

High · published February 10, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
34.4
In the wild
Unconfirmed
What it is

⚡ An unauthenticated network request could disable your SAP BusinessObjects BI Platform access completely! This vulnerability allows attackers to break authentication like a party crasher slipping past a bouncer. 🔥 Think of it as a VIP event where an unauthorized guest somehow convinces the door staff to let them in without a ticket. Once they're in, they can hog all the resources, blocking legitimate guests from enjoying the show! This could be a nightmare scenario for your business—legitimate users may be locked out from accessing vital reports and data, leading to significant disruptions in operations. While there’s no risk to data confidentiality or integrity, the impact on availability could be absolutely devastating!

Put simply

Think of it as a VIP event where an unauthorized guest somehow convinces the door staff to let them in without a ticket. Once they're in, they can hog all the resources, blocking legitimate guests from enjoying the show! CVE-2026-0490 allows attackers to send crafted network requests to a trusted endpoint of the SAP BusinessObjects BI Platform, breaking authentication processes and thus denying access to legitimate users.

What to do

This could be a nightmare scenario for your business—legitimate users may be locked out from accessing vital reports and data, leading to significant disruptions in operations. While there’s no risk to data confidentiality or integrity, the impact on availability could be absolutely devastating! To mitigate this issue, ensure you apply the latest patches from SAP as soon as they're available. Additionally, review your access controls and network configurations to limit exposure to untrusted sources. Regularly audit your system to catch any suspicious activity! You've got this! Follow these steps, and you’ll have your BI Platform locked down in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00412 · 34.4th percentile
Weakness
CWE-862 · Missing Authorization
Published
2026-02-10T03:01Z
EPSS history
Timeline
  • 10 FEB 03:01Z
    Denial of service (DOS) in SAP BusinessObjects BI Platform
    cvelistv5