CVE-2026-23687

8.8 highEPSS 0.5%

High (8.8) in sap sap basis. EPSS 0.5% chance of exploitation in the next 30 days.

SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated attacker with normal privileges to obtain a valid signed message and send modified signed XML documents to the verifier. This may result in acceptance of tampered identity information, unauthorized access to sensitive user data and potential disruption of normal system usage.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 42% of CVEs (scores of 2026-10-31)
CWE: CWE-347
Published: 2026-02-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sap:sap_basis

References

https://me.sap.com/notes/3697567
https://url.sap/sapsecuritypatchday
http://seclists.org/fulldisclosure/2026/Jun/1

Check your stack JSON