CVE-2026-0492

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-0492", "assignerOrgId": "e4686d1a-f260-4930-ac4c-2f5c992778dd", "state": "PUBLISHED", "assignerShortName": "sap", "dateReserved": "2025-12-09T22:06:35.056Z", "datePublished": "2026-01-13T01:13:00.391Z", "dateUpdated": "2026-02-26T15:04:49.557Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "SAP HANA database", "vendor": "SAP_SE", "versions": [{"status": "affected", "version": "HDB 2.00"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>SAP HANA database is vulnerable to privilege escalation allowing an attacker with valid credentials of any user to switch to another user potentially gaining administrative access. This exploit could result in a total compromise of the system\ufffds confidentiality, integrity, and availability.</p>"}], "value": "SAP HANA database is vulnerable to privilege escalation allowing an attacker with valid credentials of any user to switch to another user potentially gaining administrative access. This exploit could result in a total compromise of the system\ufffds confidentiality, integrity, and availability."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-306", "description": "CWE-306: Missing Authentication for Critical Function", "lang": "eng", "type": "CWE"}]}], "providerMetadata": {"orgId": "e4686d1a-f260-4930-ac4c-2f5c992778dd", "shortName": "sap", "dateUpdated": "2026-01-13T01:13:00.391Z"}, "references": [{"url": "https://me.sap.com/notes/3691059"}, {"url": "https://url.sap/sapsecuritypatchday"}], "source": {"discovery": "UNKNOWN"}, "title": "Privilege escalation vulnerability in SAP HANA database", "x_generator": {"engine": "Vulnogram 0.5.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-0492", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-01-14T04:57:12.253896Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-26T15:04:49.557Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-0492", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-01-14T04:57:12.253896Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-13T16:20:34.548Z"}}], "cna": {"title": "Privilege escalation vulnerability in SAP HANA database", "source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "SAP_SE", "product": "SAP HANA database", "versions": [{"status": "affected", "version": "HDB 2.00"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://me.sap.com/notes/3691059"}, {"url": "https://url.sap/sapsecuritypatchday"}], "x_generator": {"engine": "Vulnogram 0.5.0"}, "descriptions": [{"lang": "en", "value": "SAP HANA database is vulnerable to privilege escalation allowing an attacker with valid credentials of any user to switch to another user potentially gaining administrative access. This exploit could result in a total compromise of the system\ufffds confidentiality, integrity, and availability.", "supportingMedia": [{"type": "text/html", "value": "<p>SAP HANA database is vulnerable to privilege escalation allowing an attacker with valid credentials of any user to switch to another user potentially gaining administrative access. This exploit could result in a total compromise of the system\ufffds confidentiality, integrity, and availability.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "eng", "type": "CWE", "cweId": "CWE-306", "description": "CWE-306: Missing Authentication for Critical Function"}]}], "providerMetadata": {"orgId": "e4686d1a-f260-4930-ac4c-2f5c992778dd", "shortName": "sap", "dateUpdated": "2026-01-13T01:13:00.391Z"}}}, "cveMetadata": {"cveId": "CVE-2026-0492", "state": "PUBLISHED", "dateUpdated": "2026-02-26T15:04:49.557Z", "dateReserved": "2025-12-09T22:06:35.056Z", "assignerOrgId": "e4686d1a-f260-4930-ac4c-2f5c992778dd", "datePublished": "2026-01-13T01:13:00.391Z", "assignerShortName": "sap"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "SAP HANA database", "vendor": "SAP_SE", "versions": [{"status": "affected", "version": "HDB 2.00"}]}], "source": "cna@sap.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:sap:hana_database:2.00:*:*:*:*:*:*:*", "matchCriteriaId": "4C6CA542-7071-48B6-B135-3AE9B4BB1DC5", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "SAP HANA database is vulnerable to privilege escalation allowing an attacker with valid credentials of any user to switch to another user potentially gaining administrative access. This exploit could result in a total compromise of the system\ufffds confidentiality, integrity, and availability."}, {"lang": "es", "value": "La base de datos SAP HANA es vulnerable a la escalada de privilegios, permitiendo a un atacante con credenciales v\u00e1lidas de cualquier usuario cambiar a otro usuario, potencialmente obteniendo acceso administrativo. Este exploit podr\u00eda resultar en un compromiso total de la confidencialidad, integridad y disponibilidad del sistema."}], "id": "CVE-2026-0492", "lastModified": "2026-06-17T10:10:50.320", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "cna@sap.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-0492", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-01-14T04:57:12.253896Z", "version": "2.0.3"}}]}, "published": "2026-01-13T02:15:51.243", "references": [{"source": "cna@sap.com", "tags": ["Permissions Required"], "url": "https://me.sap.com/notes/3691059"}, {"source": "cna@sap.com", "tags": ["Patch"], "url": "https://url.sap/sapsecuritypatchday"}], "sourceIdentifier": "cna@sap.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-306"}], "source": "cna@sap.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-18T06:52:13.320256+00:00", "value": {"mitigation_remediation": ["Apply the latest SAP HANA security patch that removes unauthorized user switching functionality", "Configure the database to enforce strict role\u2011based access control and verify that users do not have broader privileges than necessary", "Monitor and log any account switching events and set alerts for anomalous use of administrative accounts"], "summary": {"action": "Patch", "impact": "Privilege Escalation through user account switching"}, "threat_synthesis": {"affected_systems": "SAP SE\u2019s SAP HANA database is affected. No specific release or version information is provided in the CNA data.", "description_and_impact": "A flaw in the SAP HANA database allows an authenticated user to switch to the session of another user, which can result in administrative access. The effect is a full compromise of confidentiality, integrity, and availability. The root weakness is an authorization flaw (CWE\u2011306).", "risk_and_exploitability": "The CVSS score is 8.8, indicating high severity, but the EPSS score is under 1\u202f%, showing a low probability of exploitation at present. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is authenticated application\u2011level access, requiring a valid user credential to trigger the privilege escalation."}}}}, "created": "2026-01-13T09:27:04.515055+00:00", "updated": "2026-04-18T07:00:11.348406+00:00", "vendors": ["sap", "sap$PRODUCT$hana", "sap$PRODUCT$hana_database"]}