Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform_CVE-2026-0506

{
    "lastseen": "",
    "description": "Due to a Missing Authorization Check vulnerability in Application Server ABAP and ABAP Platform, an authenticated attacker could misuse an RFC function to execute form routines (FORMs) in the ABAP system. Successful exploitation could allow the attacker to write or modify data accessible via FORMs and invoke system functionality exposed via FORMs, resulting in a high impact on integrity and availability, while confidentiality remains unaffected.",
    "published": "2026-01-13T01:14:33.899Z",
    "modified": "2026-01-13T01:14:33.899Z",
    "type": "cve",
    "title": "Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform",
    "source": "sap",
    "references": "https://me.sap.com/notes/3688703\nhttps://url.sap/sapsecuritypatchday",
    "id": "CVE-2026-0506",
    "bulletinFamily": "",
    "cwe": [
        "CWE-862"
    ],
    "cvelist": null,
    "sourceData": "SAP_SE SAP NetWeaver Application Server ABAP and ABAP Platform SAP_BASIS 700\nSAP_SE SAP NetWeaver Application Server ABAP and ABAP Platform SAP_BASIS 701\nSAP_SE SAP NetWeaver Application Server ABAP and ABAP Platform SAP_BASIS 702\nSAP_SE SAP NetWeaver Application Server ABAP and ABAP Platform SAP_BASIS 731\nSAP_SE SAP NetWeaver Application Server ABAP and ABAP Platform SAP_BASIS 740\nSAP_SE SAP NetWeaver Application Server ABAP and ABAP Platform SAP_BASIS 750\nSAP_SE SAP NetWeaver Application Server ABAP and ABAP Platform SAP_BASIS 751\nSAP_SE SAP NetWeaver Application Server ABAP and ABAP Platform SAP_BASIS 752\nSAP_SE SAP NetWeaver Application Server ABAP and ABAP Platform SAP_BASIS 753\nSAP_SE SAP NetWeaver Application Server ABAP and ABAP Platform SAP_BASIS 754\nSAP_SE SAP NetWeaver Application Server ABAP and ABAP Platform SAP_BASIS 755\nSAP_SE SAP NetWeaver Application Server ABAP and ABAP Platform SAP_BASIS 756\nSAP_SE SAP NetWeaver Application Server ABAP and ABAP Platform SAP_BASIS 757\nSAP_SE SAP NetWeaver Application Server ABAP and ABAP Platform SAP_BASIS 758\nSAP_SE SAP NetWeaver Application Server ABAP and ABAP Platform SAP_BASIS 816",
    "sourceHref": "",
    "cvss": {
        "score": 8.1,
        "severity": "HIGH",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "SAP NetWeaver Application Server ABAP and ABAP Platform",
    "version": "SAP_BASIS 700",
    "vendor": "SAP_SE",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}