CVE-2026-0507

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-0507", "assignerOrgId": "e4686d1a-f260-4930-ac4c-2f5c992778dd", "state": "PUBLISHED", "assignerShortName": "sap", "dateReserved": "2025-12-09T22:06:46.853Z", "datePublished": "2026-01-13T01:15:36.687Z", "dateUpdated": "2026-02-26T15:04:48.627Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "SAP Application Server for ABAP and SAP NetWeaver RFCSDK", "vendor": "SAP_SE", "versions": [{"status": "affected", "version": "KRNL64UC 7.53"}, {"status": "affected", "version": "NWRFCSDK 7.50"}, {"status": "affected", "version": "KERNEL 7.53"}, {"status": "affected", "version": "7.54"}, {"status": "affected", "version": "7.77"}, {"status": "affected", "version": "7.89"}, {"status": "affected", "version": "7.93"}, {"status": "affected", "version": "9.16"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>Due to an OS Command Injection vulnerability in SAP Application Server for ABAP and SAP NetWeaver RFCSDK, an authenticated attacker with administrative access and adjacent network access could upload specially crafted content to the server. If processed by the application, this content enables execution of arbitrary operating system commands. Successful exploitation could lead to full compromise of the system\ufffds confidentiality, integrity, and availability.</p>"}], "value": "Due to an OS Command Injection vulnerability in SAP Application Server for ABAP and SAP NetWeaver RFCSDK, an authenticated attacker with administrative access and adjacent network access could upload specially crafted content to the server. If processed by the application, this content enables execution of arbitrary operating system commands. Successful exploitation could lead to full compromise of the system\ufffds confidentiality, integrity, and availability."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-78", "description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command", "lang": "eng", "type": "CWE"}]}], "providerMetadata": {"orgId": "e4686d1a-f260-4930-ac4c-2f5c992778dd", "shortName": "sap", "dateUpdated": "2026-01-13T01:15:36.687Z"}, "references": [{"url": "https://me.sap.com/notes/3675151"}, {"url": "https://url.sap/sapsecuritypatchday"}], "source": {"discovery": "UNKNOWN"}, "title": "OS Command Injection vulnerability in SAP Application Server for ABAP and SAP NetWeaver RFCSDK", "x_generator": {"engine": "Vulnogram 0.5.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-0507", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-01-14T04:57:16.463295Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-26T15:04:48.627Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-0507", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-01-14T04:57:16.463295Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-13T18:31:59.912Z"}}], "cna": {"title": "OS Command Injection vulnerability in SAP Application Server for ABAP and SAP NetWeaver RFCSDK", "source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.4, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "SAP_SE", "product": "SAP Application Server for ABAP and SAP NetWeaver RFCSDK", "versions": [{"status": "affected", "version": "KRNL64UC 7.53"}, {"status": "affected", "version": "NWRFCSDK 7.50"}, {"status": "affected", "version": "KERNEL 7.53"}, {"status": "affected", "version": "7.54"}, {"status": "affected", "version": "7.77"}, {"status": "affected", "version": "7.89"}, {"status": "affected", "version": "7.93"}, {"status": "affected", "version": "9.16"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://me.sap.com/notes/3675151"}, {"url": "https://url.sap/sapsecuritypatchday"}], "x_generator": {"engine": "Vulnogram 0.5.0"}, "descriptions": [{"lang": "en", "value": "Due to an OS Command Injection vulnerability in SAP Application Server for ABAP and SAP NetWeaver RFCSDK, an authenticated attacker with administrative access and adjacent network access could upload specially crafted content to the server. If processed by the application, this content enables execution of arbitrary operating system commands. Successful exploitation could lead to full compromise of the system\ufffds confidentiality, integrity, and availability.", "supportingMedia": [{"type": "text/html", "value": "<p>Due to an OS Command Injection vulnerability in SAP Application Server for ABAP and SAP NetWeaver RFCSDK, an authenticated attacker with administrative access and adjacent network access could upload specially crafted content to the server. If processed by the application, this content enables execution of arbitrary operating system commands. Successful exploitation could lead to full compromise of the system\ufffds confidentiality, integrity, and availability.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "eng", "type": "CWE", "cweId": "CWE-78", "description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command"}]}], "providerMetadata": {"orgId": "e4686d1a-f260-4930-ac4c-2f5c992778dd", "shortName": "sap", "dateUpdated": "2026-01-13T01:15:36.687Z"}}}, "cveMetadata": {"cveId": "CVE-2026-0507", "state": "PUBLISHED", "dateUpdated": "2026-02-26T15:04:48.627Z", "dateReserved": "2025-12-09T22:06:46.853Z", "assignerOrgId": "e4686d1a-f260-4930-ac4c-2f5c992778dd", "datePublished": "2026-01-13T01:15:36.687Z", "assignerShortName": "sap"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "SAP Application Server for ABAP and SAP NetWeaver RFCSDK", "vendor": "SAP_SE", "versions": [{"status": "affected", "version": "KRNL64UC 7.53"}, {"status": "affected", "version": "NWRFCSDK 7.50"}, {"status": "affected", "version": "KERNEL 7.53"}, {"status": "affected", "version": "7.54"}, {"status": "affected", "version": "7.77"}, {"status": "affected", "version": "7.89"}, {"status": "affected", "version": "7.93"}, {"status": "affected", "version": "9.16"}]}], "source": "cna@sap.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Due to an OS Command Injection vulnerability in SAP Application Server for ABAP and SAP NetWeaver RFCSDK, an authenticated attacker with administrative access and adjacent network access could upload specially crafted content to the server. If processed by the application, this content enables execution of arbitrary operating system commands. Successful exploitation could lead to full compromise of the system\ufffds confidentiality, integrity, and availability."}, {"lang": "es", "value": "Debido a una vulnerabilidad de inyecci\u00f3n de comandos del sistema operativo en SAP Servidor de aplicaciones para ABAP y SAP NetWeaver RFCSDK, un atacante autenticado con acceso administrativo y acceso a la red adyacente podr\u00eda cargar contenido especialmente dise\u00f1ado al servidor. Si es procesado por la aplicaci\u00f3n, este contenido permite la ejecuci\u00f3n de comandos arbitrarios del sistema operativo. La explotaci\u00f3n exitosa podr\u00eda llevar a un compromiso total de la confidencialidad, integridad y disponibilidad del sistema."}], "id": "CVE-2026-0507", "lastModified": "2026-06-17T10:10:51.910", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.7, "impactScore": 6.0, "source": "cna@sap.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-0507", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-01-14T04:57:16.463295Z", "version": "2.0.3"}}]}, "published": "2026-01-13T02:15:53.427", "references": [{"source": "cna@sap.com", "url": "https://me.sap.com/notes/3675151"}, {"source": "cna@sap.com", "url": "https://url.sap/sapsecuritypatchday"}], "sourceIdentifier": "cna@sap.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-78"}], "source": "cna@sap.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-18T06:48:15.928450+00:00", "value": {"mitigation_remediation": ["Install the SAP security patch referenced in SAP Note 3675151 and apply any related updates to SAP NetWeaver RFCSDK.", "Limit network access to the SAP Application Server for ABAP to trusted IP addresses and enforce strict firewall rules to prevent adjacent network attackers from reaching upload endpoints.", "Apply the principle of least privilege to administrative accounts, ensuring that only necessary permissions are granted and that administrative actions are logged and monitored."], "summary": {"action": "Apply Patch", "impact": "Remote Command Execution leading to full system compromise"}, "threat_synthesis": {"affected_systems": "SAP Application Server for ABAP and SAP NetWeaver RFCSDK are affected. Specific product versions are not listed in the available data, so all releases with similar architecture should be reviewed for susceptibility.", "description_and_impact": "An authenticated attacker with administrative privileges and adjacent network access can upload specially crafted content to SAP Application Server for ABAP and SAP NetWeaver RFCSDK. The server processes that content and allows execution of arbitrary operating system commands. This results in complete loss of confidentiality, integrity, and availability of the affected system.", "risk_and_exploitability": "The CVSS score is 8.4, indicating high severity. The EPSS score of 1% shows a low but non-zero likelihood of exploitation. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog. Exploitation requires network connectivity to the SAP server, administrative authentication, and the ability to upload content; the attacker must then trigger the processing of that content to achieve command execution."}}}}, "created": "2026-01-13T09:26:58.098905+00:00", "updated": "2026-04-18T07:00:11.340400+00:00", "vendors": ["sap", "sap$PRODUCT$application_server", "sap$PRODUCT$netweaver", "sap$PRODUCT$netweaver_abap", "sap$PRODUCT$netweaver_abap_application_server", "sap$PRODUCT$netweaver_application_server"]}