Search: CVE-2026-120017

CVE-2026-120017 is a critical vulnerability in SAP NetWeaver AS ABAP and ABAP Platform's SAML2 Service Provider component. It involves improper verification of cryptographic signatures in authentication assertions under certain configurations. An unauthenticated attacker can exploit this flaw to bypass authentication and impersonate any user, including privileged accounts. Successful exploitation may lead to full system compromise and impact connected systems, severely affecting confidentiality, integrity, and availability.