---
id: "CVE-2026-76973"
page: "https://infrastack.ai/live/CVE-2026-76973"
kind: "vulnerability"
aliases: ["CVE-2026-76973"]
title: "SAP NetWeaver ABAP Message Server: integer overflow lets unauthenticated network requests crash the server"
severity: "high"
cvss: 7.5
epss: null
exploited: false
status: "open"
category: "vendor"
products: [{"name": "SAP NetWeaver and ABAP Platform (Message Server)", "fixed": [], "affected": "KRNL64NUC 7.22; KRNL64UC 7.22, 7.22EXT, 7.53, 8.04; KERNEL 7.22, 7.53, 7.54, 7.77, 7.93, 9.16, 9.18, 9.20, 9.21", "ecosystem": "vendor"}]
ecosystems: []
tags: ["abap", "denial-of-service", "kernel", "message-server", "netweaver", "sap", "self-hosted", "vendor"]
not_affected_if: ["message-server-not-reachable", "no-sap-netweaver"]
published_at: "2026-11-10T01:17:20+00:00"
first_seen_at: "2026-11-10T01:26:43+00:00"
updated_at: "2026-11-10T01:32:47+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76973", "first_seen_at": "2026-11-10T01:26:43+00:00"}, {"source": "analyst", "url": "https://cveawg.mitre.org/api/cve/CVE-2026-76973", "first_seen_at": "2026-11-10T01:32:47+00:00", "cites": ["https://cveawg.mitre.org/api/cve/CVE-2026-76973"]}]
exploit_sources: []
---

# SAP NetWeaver ABAP Message Server: integer overflow lets unauthenticated network requests crash the server

Link for people: https://infrastack.ai/live/CVE-2026-76973 (this .md is for agents)

A memory corruption flaw in the Application Server ABAP of SAP NetWeaver and ABAP Platform can be triggered by specially crafted network requests. A successful attack crashes the server and disrupts active connections, causing denial of service without exposing or changing data.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:SAP NetWeaver and ABAP Platform (Message Server) affected KRNL64NUC 7.22; KRNL64UC 7.22, 7.22EXT, 7.53, 8.04; KERNEL 7.22, 7.53, 7.54, 7.77, 7.93, 9.16, 9.18, 9.20, 9.21 fixed no fixed version listed

## How to check

In SAP, run transaction SM51 or SMMS (or /sap/public/info) and check the kernel release and patch level (System > Status > Kernel information). Affected kernels per SAP's CVE record: KRNL64NUC 7.22; KRNL64UC 7.22, 7.22EXT, 7.53, 8.04; KERNEL 7.22, 7.53, 7.54, 7.77, 7.93, 9.16, 9.18, 9.20, 9.21. Compare the patch level with the fixed level in SAP Note 3789273 (needs SAP for Me login). Also check whether the Message Server port (36xx / 39xx) is reachable from untrusted networks.

## Fix

Apply SAP Security Note 3789273 (kernel patch). The exact fixed kernel patch levels are in the note, which requires SAP login and was not read; unknown here.

## Timeline

- 2026-11-10T01:26:43+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-76973
- 2026-11-10T01:32:47+00:00 analyst https://cveawg.mitre.org/api/cve/CVE-2026-76973 — SAP's CNA record (cve.org data) names SAP Message Server component, CWE-190, kernel versions, SAP Note 3789273 (behind SAP login, not read). Fixed patch levels unknown; no exploitation or PoC found.

## Documents

- [advisory] CVE-2026-76973 CVE record published by SAP (CNA) https://cveawg.mitre.org/api/cve/CVE-2026-76973

## From the sources

Due to a Memory Corruption vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform, an unauthenticated attacker could send specially crafted network requests to the affected service. By triggering the vulnerability, the attacker could cause the server to crash and disrupt active connections, leading to a denial of service condition. Successful exploitation could result in a high impact to the availability while the confidentiality and integrity remains unaffected.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_