CVE-2026-66779

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server ABAP (affected versions not specified)

Description An authenticated attacker can generate and distribute a malicious link. When an authenticated victim accesses this link, injected input is processed and reflected within the Document Object Model (DOM)—the programming interface for HTML and XML documents—on the client side during page rendering. This leads to the execution of malicious content within the victim's browser context, potentially resulting in high impact to confidentiality and low impact to system integrity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.