medium2026-10-13SAP NetWeaver AS ABAP — SAP GUI for HTMLCVE-2026-76976
Malicious Content Execution in SAP GUI for HTML
SAP GUI for HTML
Our Take
Reported as an update in some listings. Routine web-client XSS, so schedule it with your next ABAP support package cycle.
Vulnerability Detail
Cross-site scripting that allows malicious content to run in the SAP GUI for HTML client.
Patch Action
Apply SAP Note 3671819. Verify affected releases in the official note.
Patch Info