VULNERABILITY INTELLIGENCE
CVE-2026-58236
CVSS score5.5 MEDIUM
EPSS probability0.69%
CISA KEVNot currently listed
Published2026-08-11
Last modified2026-10-24
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H
Description
SAP NetWeaver Application Server ABAP and ABAP Platform allow an attacker with high privileges to bypass missing security controls on an internal code path leading to operating system command execution. Successful exploitation could allow the attacker to execute OS-level commands that write to the operating system or stop the SAP system, resulting in no impact on confidentiality, low impact on integrity, and high impact on availability.
Weakness classification
- cna@sap.com: CWE-78