CVE-2026-109805
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
33/100
Published: 2026-11-10
Modified: 2026-11-12
First seen: 2026-11-10
Status: active
Attack Surface
Adjacent
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Adjacent
AC:
High
PR:
High
UI:
None
S:
Unchanged
C:
High
I:
High
A:
High
Description
Due to a weak HMAC cryptography calculation when receiving an RFC callback in SAP NetWeaver and ABAP Platform (Application Server ABAP), an authenticated attacker with high privileges and access to a network segment between application servers on an SAP system could intercept network communication between application servers and change the identity of the caller, enabling the execution of unauthorized function calls on the target server with escalated privileges leading to High impact on Confidentiality, Integrity, and Availability of the application.
Weakness Classification (1)
Affected Software (33)
Showing 30 of 33 entries