VULNERABILITY INTELLIGENCE

CVE-2026-0492

CVSS score8.8 HIGH
EPSS probability0.33%
CISA KEVNot currently listed
Published2026-01-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

SAP HANA database is vulnerable to privilege escalation allowing an attacker with valid credentials of any user to switch to another user potentially gaining administrative access. This exploit could result in a total compromise of the system�s confidentiality, integrity, and availability.

Weakness classification

  • cna@sap.com: CWE-306

Primary references