CVE-2026-58243CWE-862broken-access-control

CVE-2026-58243

High · published August 11, 2026

CVSS v3.1
8.8
EPSS
0%
Percentile
37.4
In the wild
Unconfirmed
What it is

SAP ABAP Development Tools does not perform necessary authorization checks for certain functionality, allowing an attacker with low privileges to execute unauthorized database operations against SAP NetWeaver AS ABAP. Successful exploitation could allow the attacker to read sensitive data, modify application data, and disrupt access for legitimate users, resulting in high impact on confidentiality, integrity, and availability.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00442 · 37.4th percentile
Weakness
CWE-862 · Missing Authorization
Published
2026-08-11T05:17Z
References (2)
EPSS history
Timeline
  • 11 AUG 00:16Z
    Privilege Escalation vulnerability in SAP ABAP Developer Tools
    cvelistv5