CVE-2026-76970— Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform
Quick assessment
Affected
SAP_SE SAP NetWeaver and ABAP Platform
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
由于 SAP NetWeaver 和 ABAP 平台的 Application Server ABAP 中存在内存破坏漏洞，未认证的攻击者可向应用程序发送特制的请求。若这些请求被应用程序处理，可能会在解析例程中触发内存破坏条件，导致受影响的进程崩溃并重启。攻击者通过反复发送此类请求，可造成持续的服务拒绝，从而对可用性产生严重影响。机密性和完整性不受影响。
Possible ATT&CK Techniques 1 AI
T1499.003 · Application Exhaustion Flood
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-76970
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform
Source: CVE Program / CVE List V5
Vulnerability Description
Due to a Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform, an unauthenticated attacker could send specially crafted requests to the application. If processed by the application, these requests could trigger a memory corruption condition in the parsing routine, which could cause the affected processes to crash and restart. By repeatedly sending such requests, the attacker could cause a sustained denial of service, leading to a high impact on availability. Confidentiality and integrity remain unaffected.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存写
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| SAP_SE | SAP NetWeaver and ABAP Platform | KRNL64NUC 7.22 | - |
|
II. Public POCs for CVE-2026-76970
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-76970
请登录查看更多情报信息。
Other References for CVE-2026-76970 (1)
Same Patch Batch · SAP_SE · 2026-11-10 · 40 CVEs total
| CVE-2026-89126 | 10.0 CRITICAL | Memory Corruption vulnerability in SAP Web Dispatcher |
| CVE-2026-76964 | 10.0 CRITICAL | Memory Corruption Vulnerability in SAP NetWeaver AS ABAP (Internet Communication Manager) |
| CVE-2026-120017 | 10.0 CRITICAL | Missing Authentication in SAP NetWeaver AS ABAP and ABAP Platform (SAML2 Service Provider) |
| CVE-2026-89103 | 10.0 CRITICAL | Broken Access Control in SAP Gateway |
| CVE-2026-109795 | 9.9 CRITICAL | Missing authorization check in S4CRM |
| CVE-2026-109803 | 9.9 CRITICAL | Code Injection vulnerability in SAP NetWeaver Knowledge Management (XML Forms) |
| CVE-2026-76965 | 9.9 CRITICAL | OS Command Injection vulnerability in ABAP Application Server for SAP NetWeaver and ABAP P |
| CVE-2026-89119 | 9.6 CRITICAL | Cross-Site Request Forgery (CSRF) vulnerability in SAP Web Dispatcher and Internet Communi |
| CVE-2026-109798 | 9.1 CRITICAL | XML External Entity (XXE) Vulnerability in SAP BusinessObjects Business Intelligence Platf |
| CVE-2026-76966 | 8.9 HIGH | Multiple vulnerabilities in Application Server ABAP of SAP NetWeaver and ABAP Platform |
| CVE-2026-120008 | 8.2 HIGH | Memory Corruption Vulnerability in SAP NetWeaver (Internet Graphics Service) |
| CVE-2026-109800 | 7.7 HIGH | Memory Corruption vulnerability in SAP Web Dispatcher |
| CVE-2026-120014 | 7.6 HIGH | Cross-Site Request Forgery (CSRF) vulnerability in SAP Web Dispatcher and Internet Communi |
| CVE-2026-109807 | 7.5 HIGH | Multiple Vulnerabilities in SAP NetWeaver (Internet Graphics Service) |
| CVE-2026-109794 | 7.5 HIGH | Denial of Service vulnerability in SAP NetWeaver Application Server ABAP, ABAP Platform an |
| CVE-2026-109793 | 7.5 HIGH | Denial of Service (DoS) vulnerability in SAP NetWeaver Application Server ABAP (Internet C |
| CVE-2026-109799 | 7.5 HIGH | Improper verification of JWT signature in IASContextProvider leads to tenant/user identity |
| CVE-2026-109804 | 7.5 HIGH | Information Disclosure in SAP NetWeaver (SAP Message Server) |
| CVE-2026-109806 | 7.5 HIGH | Multiple Vulnerabilities in SAP NetWeaver (Internet Graphics Service) |
| CVE-2026-120015 | 7.5 HIGH | Insufficient Input Validation in SAP Host Agent |
Showing top 20 of 40 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: SAP NetWeaver and ABAP Platform
-
CVE-2026-109796
Multiple vulnerabilities in Application Server ABAP of SAP N -
CVE-2026-76966
Multiple vulnerabilities in Application Server ABAP of SAP N -
CVE-2026-76965
OS Command Injection vulnerability in ABAP Application Serve -
CVE-2026-76963
Missing Authorization Check in Application Server ABAP of SA -
CVE-2026-34265
Memory Corruption vulnerability in Application Server ABAP f
Same vendor: SAP_SE
-
CVE-2026-109799
Improper verification of JWT signature in IASContextProvider -
CVE-2026-109797
Cross-tenant sandbox takeover in SAP/astonish -
CVE-2026-109805
Weak Cryptography in SAP NetWeaver and ABAP Platform (Applic -
CVE-2026-89125
Insecure Storage of Sensitive Information in SAP Web Dispatc -
CVE-2026-120017
Missing Authentication in SAP NetWeaver AS ABAP and ABAP Pla
Same weakness: CWE-787
-
CVE-2026-91759
Out-of-Bounds Write Vulnerability in Hitachi Dynamic Link Ma -
CVE-2026-88707
ASUS 路由器固件越界写漏洞 -
CVE-2026-120008
Memory Corruption Vulnerability in SAP NetWeaver (Internet G -
CVE-2026-90591
NXP ENET-QOS Ethernet driver re-arms RX descriptors with a c -
CVE-2026-73857
ModSecurity v3 XML Request Body Processor Uninitialized Poin