Description

SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated, low-privileged user to perform background Remote Function Calls without the required S_RFC authorization in certain cases. This can result in a high impact on integrity and availability, and no impact on the confidentiality of the application.

INFO

Published Date :

2026-02-10T03:01:52.913Z

Last Modified :

2026-02-10T16:27:08.976Z

Source :

sap
AFFECTED PRODUCTS

The following products are affected by CVE-2026-0509 vulnerability.

Vendors Products
Sap Se
  • Sap Netweaver Application Server Abap And Abap Platform
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2026-0509.

URL Resource
https://me.sap.com/notes/3674774 cve-icon cve-icon
https://url.sap/sapsecuritypatchday cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact