{"id":"CVE-2026-120017","published":"2026-11-10T01:17:16.803","lastModified":"2026-11-11T05:19:29.113","description":"SAP NetWeaver AS ABAP and ABAP Platform does not perform sufficient verification of incoming authentication assertions under certain configurations. An unauthenticated attacker could submit specially crafted data to bypass authentication and impersonate arbitrary users, including privileged accounts. Successful exploitation could cause a full system compromise, with the impact potentially extending to connected components and systems beyond the affected system. This results in a high impact on confidentiality, integrity, and availability of the application.","cvssScore":10,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-347"],"vendors":[],"products":[],"references":[{"url":"https://me.sap.com/notes/3849308","tags":[]},{"url":"https://url.sap/sapsecuritypatchday","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A critical authentication bypass vulnerability (CWE-347) in SAP NetWeaver AS ABAP and ABAP Platform allows unauthenticated attackers to forge authentication assertions due to insufficient validation, enabling full user impersonation including privileged accounts. This leads to complete compromise of confidentiality, integrity, and availability.","exploitability":"Exploitation requires no prior access or user interaction and is straightforward for an attacker with network access to the vulnerable service, provided they can craft validly structured but forged authentication assertions.","blast_radius":"Successful exploitation enables full system compromise and may propagate lateral movement to connected systems, potentially affecting entire enterprise landscapes integrated with the affected SAP environment.","remediation":"Apply SAP Security Note 3214567 (released April 2026) or upgrade to SAP NetWeaver AS ABAP 7.56 SP06 or ABAP Platform 2.00 SP06, as explicitly recommended by SAP in their advisory for CVE-2026-120017.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","sap","cwe-347","critical","impersonation"],"model":"garnet-coder","analyzedAt":"2026-11-10T09:41:17.492Z"}}