CRITICALCVSS v3.1 9.9Vulnerability
CVE-2026-76965
SAP NetWeaver Application Server ABAP and ABAP Platform does not perform necessary authorization checks for certain internal functionality. An attacker with low privileges could invoke affected functionality to execute arbitrary operating system commands on the underlying host. Successful exploitation could impact resources beyond the vulnerable component, resulting in a high impact on confidentiality, integrity and availability of the system.
Properties
- Severity
- CRITICAL
- Nvd fetched at
- 2026-11-10T23:33:48.924589+00:00
- Epss score
- 0.00312
- Cvss severity
- CRITICAL
- Cvss score
- 9.9
- Retrieved at
- 2026-11-10T23:35:19+00:00
- Last source
- FIRST EPSS
- Score
- 9.9
- Cvss version
- 3.1
- Cve id
- CVE-2026-76965
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- First seen by Signal
- 2026-11-10T03:20:44+00:00
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- Published at
- 2026-11-10T01:17:20.387
- Last modified
- 2026-11-10T22:11:23.807
- Epss percentile
- 0.24315
Related Entities (1)
HAS_WEAKNESS (1)
Related research
Explore deeper with Ninja Signal's threat intelligence graph