PT-2026-70028 · Sap · Sap Netweaver Application Server Abap+1
CVE-2026-58236
·
Published
2026-08-11
·
Updated
2026-08-11
CVSS v3.1
5.5
Medium
| Vector | AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H |
Name of the Vulnerable Software and Affected Versions
SAP NetWeaver Application Server ABAP and ABAP Platform (affected versions not specified)
Description
An attacker with high privileges can bypass missing security controls on an internal code path, leading to operating system command execution. This allows the execution of OS-level commands that can write to the operating system or stop the SAP system, resulting in low impact on integrity and high impact on availability.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
OS Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Abap Platform
Sap Netweaver Application Server Abap