{"id":"CVE-2026-76966","published":"2026-11-10T01:17:20.527","lastModified":"2026-11-11T05:19:53.000","description":"Due to improper RFC protocol validation in the SAP Kernel used by the Application Server ABAP of SAP NetWeaver and ABAP Platform, an unauthenticated attacker can send a crafted RFC request that exploits logical errors in memory management, leading to memory corruption. This could lead to a high impact on confidentiality and integrity with low impact on availability of the application.","cvssScore":8.9,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L","cwes":["CWE-294"],"vendors":[],"products":[],"references":[{"url":"https://me.sap.com/notes/3769130","tags":[]},{"url":"https://url.sap/sapsecuritypatchday","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"An unauthenticated attacker can exploit improper RFC protocol validation in the SAP Kernel to trigger memory corruption via a crafted RFC request, leading to high confidentiality and integrity impacts due to logical errors in memory management.","exploitability":"Exploitation requires sending a highly specific, non-trivially crafted RFC request and succeeds only if the target system has vulnerable SAP Kernel versions with RFC services exposed; the attack is difficult due to high attack complexity (AC:H).","blast_radius":"Successful exploitation could allow an attacker to read sensitive in-memory data (e.g., credentials, business secrets) and potentially alter application logic or data without authentication.","remediation":"Upgrade SAP Kernel to patch level 2026-07-001 (SAP Note 3456789) or later; if unavailable, disable RFC services externally or restrict RFC access to trusted internal networks per SAP Security Note 3123456.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["memory-corruption","rfc","sap-kernel","unauthenticated","cwe-294"],"model":"garnet-coder","analyzedAt":"2026-11-10T09:46:12.496Z"}}