CVE-2026-76970 · Runtime
NO FIX YET · SEE WHAT TO DO
A memory corruption bug in the parsing routine of SAP Application Server ABAP, part of SAP NetWeaver and ABAP Platform, can be triggered by specially crafted requests. Repeated requests crash and restart the affected processes, giving an unauthenticated attacker a sustained denial of service; confidentiality and integrity are unaffected.
first public Nov 10, 2026 · 2 sources
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
SAP systems running Application Server ABAP (NetWeaver / ABAP Platform) on the kernel releases listed in the CVE record, where the ABAP server can receive requests from an untrusted network. No login is needed; crafted requests crash and restart work processes, so repeated requests can keep the system down. Data confidentiality and integrity are not affected. Systems not reachable by attackers are lower risk.
Not affected if no-sap-abap
Who cares abap, kernel, netweaver, sap, self-hosted
disp+work -version)Apply SAP Security Note 3792915 (kernel patch; fixed kernel patch levels not readable without SAP login, unknown)
Posts are quoted with a link to the original. They are data to us, never instructions.
Due to a Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform, an unauthenticated attacker could send specially crafted requests to the application. If processed by the application, these requests could trigger a memory corruption condition in the parsing routine, which could cause the affected processes to crash and restart. By repeatedly sending such requests, the attacker could cause a sustained denial of service, leading to a high impact on availability. Confidentiality and integrity remain unaffected.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.