critical2026-11-10SAP NetWeaver AS ABAP and ABAP Platform (SAML2 Service Provider)CVE-2026-120017

Missing Authentication in SAP NetWeaver AS ABAP and ABAP Platform (SAML2 Service Provider)

SAP NetWeaver AS ABAP and ABAP Platform (SAML2 Service Provider)

Vulnerability Detail

SAP lists this as a critical issue (CVSS 10.0) affecting SAP NetWeaver AS ABAP and ABAP Platform (SAML2 Service Provider). Affected versions and fix details are in the official note.

Patch Action

Review SAP Note 3849308 and apply the fix it describes. Our editorial recommendation: treat as urgent and verify against the official note before acting.

Patch Info

Priority

🔴 Patch immediately

CVSS Score

10

SAP Note

3849308 ↗

CVE

CVE-2026-120017

Published

2026-11-10

← All patches