CVE-2010-5326VulnerabilityPublished 11/03/2021Updated 10/24/2026

CVE-2010-5326: SAP NetWeaver Remote Code Execution Vulnerability

Affects SAP NetWeaverSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 11/03/2021
KEV deadline: 05/03/2022
EPSS: 17.8% chance of exploitation in 30 days – higher than 97% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2010-5326 (opens in a new tab)

Description

CVE-2010-5326 is a high severity vulnerability in SAP NetWeaver Application Server Java Platforms where the Invoker Servlet does not require authentication. This flaw allows remote attackers to execute arbitrary code by sending crafted HTTP or HTTPS requests. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

Summary

The SAP NetWeaver Application Server Java Platforms Invoker Servlet lacks authentication controls, enabling remote code execution via HTTP or HTTPS requests. This vulnerability (CVE-2010-5326) allows unauthenticated attackers to execute arbitrary code on affected systems. It has been confirmed as exploited in the wild. No vendor advisory or patch details are included in the provided information.

Impact

Successful exploitation allows remote attackers to execute arbitrary code on the SAP NetWeaver server without authentication, potentially leading to full system compromise. The vulnerability is known to be exploited in the wild, indicating active threat and significant risk to affected systems.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the Invoker Servlet and monitor network traffic for suspicious HTTP/HTTPS requests targeting this component.

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 08:56:04 UTC

References

Related threats