CVE-2026-58246: SAP NetWeaver Application Server for ABAP SAP_BASIS 740, SAP_BASIS 750, SAP_BASIS 751, SAP_BASIS 752, SAP_BASIS 753…

CVE-2026-58246. CVSS 3.1 base score 4.3 (MEDIUM, Vendor/CNA). EPSS 0.00237 (percentile 0.13895), scored 22-Oct-2026.

Affected technology

SAP NetWeaver Application Server for ABAP · SAP_BASIS 740, SAP_BASIS 750, SAP_BASIS 751, SAP_BASIS 752, SAP_BASIS 753, SAP_BASIS 754, SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, SAP_BASIS 758, SAP_BASIS 795
SAP_SE

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Adjacent network · High privileges required · User interaction required

What an attacker can do

An attacker with access to the resulting trace data could obtain identifiers that allow impersonation of legitimate users during their validity period. Vendor/CNA’s CVSS 3.1 assessment (base score 4.3/10) rates confidentiality impact as high; integrity and availability impact as none.

Published 24-Oct-2026 15:09 UTC

CWE: CWE-497
CCR priority: 17.3 /100 (P5)
CVSS 3.1: 4.3 /10 · CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N · Vendor/CNA
EPSS: 0.00237 · percentile 0.1396 · 2026-10-24
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-24 15:09:16.138216+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-24 15:07:27.951960+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-58246.html