high2026-10-13SAP ABAP Platform — single-transaction modeCVE-2026-89120
Missing Authorization Check in Single-Transaction Mode (Regression)
SAP ABAP Platform
Our Take
A regression is a fix that did not stay fixed. It is a kernel patch, so fold it into the same kernel update as the ICM note and do both at once.
Vulnerability Detail
A missing authorization check in the ABAP kernel when running in single-transaction mode. Described as a regression, meaning a previously closed gap reopened.
Patch Action
Update to KERNEL 7.93 Patch 320 or 9.16 Patch 011 per SAP Note 3626303.
Affected Versions
KERNEL 7.93 (fix in Patch 320)
9.16 (fix in Patch 011)
Patch Info