Threats Tagged 'cve-2026-0486'

CVE-2026-0486 is a medium severity vulnerability affecting ABAP based SAP systems where a remote-enabled function module fails to perform necessary authorization checks for authenticated users. This results in unauthorized disclosure of system information, impacting confidentiality with no effect on integrity or availability. The vulnerability affects specific versions including ST-PI 2005_1_700, 2008_1_710, 740, and 758. Exploitation requires network access and authenticated user privileges but no user interaction. Although no known exploits are currently reported in the wild, the vulnerability poses a risk of information leakage that could aid further attacks. European organizations using these SAP versions should prioritize patching or mitigating this issue to prevent unauthorized data exposure. Countries with significant SAP deployments, such as Germany and the UK, are particularly at risk. Mitigation involves strict access control reviews, monitoring for unusual access patterns, and applying SAP security notes once available. Given the medium CVSS score of 5.0, the threat is moderate but should not be overlooked due to the critical role SAP systems play in enterprise operations.

MediumVulnerabilityGermanyFranceNetherlands+4#cve#cve-2026-0486#cwe-862