This vulnerability (CVE-2026-44748) in SAP NetWeaver AS ABAP and ABAP Platform arises from improper verification of cryptographic signatures (CWE-347). An attacker with normal authenticated privileges can manipulate signed XML documents and have them accepted by the system, bypassing integrity checks. This can lead to unauthorized access and impact confidentiality, integrity, and availability of the application. The issue affects a wide range of SAP_BASIS versions from 702 through 919. No official remediation or patch information is currently available, and no known exploits in the wild have been reported.

Successful exploitation allows an attacker to bypass signature verification, resulting in acceptance of tampered identity information. This can lead to unauthorized access to sensitive user data and disruption of normal system usage, severely impacting confidentiality, integrity, and availability of the affected SAP systems.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, organizations should monitor SAP security advisories closely for updates. Until a patch is available, restrict access to trusted users and consider additional compensating controls to monitor and validate signed XML documents where feasible.