CVE-2026-76973

{
  "id": "CVE-2026-76973",
  "sourceIdentifier": "[email protected]",
  "published": "2026-11-10T01:17:20.847",
  "lastModified": "2026-11-10T01:17:20.847",
  "vulnStatus": "Received",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Due to a Memory Corruption vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform, an unauthenticated attacker could send specially crafted network requests to the affected service. By triggering the vulnerability, the attacker could cause the server to crash and disrupt active connections, leading to a denial of service condition. Successful exploitation could result in a high impact to the availability while the confidentiality and integrity remains unaffected."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "SAP_SE",
          "product": "SAP NetWeaver and ABAP Platform (SAP Message Server)",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "KRNL64NUC 7.22",
              "status": "affected"
            },
            {
              "version": "7.22EXT",
              "status": "affected"
            },
            {
              "version": "KRNL64UC 7.22",
              "status": "affected"
            },
            {
              "version": "7.53",
              "status": "affected"
            },
            {
              "version": "8.04",
              "status": "affected"
            },
            {
              "version": "KERNEL 7.22",
              "status": "affected"
            },
            {
              "version": "7.54",
              "status": "affected"
            },
            {
              "version": "7.77",
              "status": "affected"
            },
            {
              "version": "7.93",
              "status": "affected"
            },
            {
              "version": "9.16",
              "status": "affected"
            },
            {
              "version": "9.18",
              "status": "affected"
            },
            {
              "version": "9.20",
              "status": "affected"
            },
            {
              "version": "9.21",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Primary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-190"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://me.sap.com/notes/3789273",
      "source": "[email protected]"
    },
    {
      "url": "https://url.sap/sapsecuritypatchday",
      "source": "[email protected]"
    }
  ]
}