by Kastro
Paper/Archive/CVE-2026-89103

CVE-2026-89103

SAP_SE SAP Gateway — Broken Access Control in SAP Gateway

CVSS 10.0
critical.is priorityof 100
30
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0No EPSS score.000 × 200.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

SAP Gateway activates the default Access Control List with high privileges allowing categorization of external attacker as internal application server. As a result an unauthenticated attacker with network access to the SAP Gateway could exploit this weakness to potentially perform unauthorized actions within the application environment, resulting in a high impact on the confidentiality, integrity, and availability of the affected system.

Affected

ProductAffectedFixed inSource
SAP GatewayKRNL64NUC 7.22–CNA
SAP Gateway7.22EXT–CNA
SAP GatewayKRNL64UC 7.22–CNA
SAP Gateway7.53–CNA
SAP Gateway8.04–CNA
SAP GatewayKERNEL 7.22–CNA
SAP Gateway7.54–CNA
SAP Gateway7.77–CNA
SAP Gateway7.93–CNA
SAP Gateway9.16–CNA
SAP Gateway9.20–CNA
SAP Gateway9.21–CNA

Scores by source

sap (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References

refme.sap.com/notes/3798345refurl.sap/sapsecuritypatchday