CVE-2026-66768

criticalpriority · track · 36EPSS 0.006 · 49 %ileNL

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.61% (49th) EPSS

CVSS 9 · critical

Is it mine?

20 products

Check your exposure

Who says so?

1 sources

ncsc_nl

EPSS · scored 2026-10-27

SAP GUI for Java does not correctly enforce the trust level policy for certain functions invoked from a connected backend system. A low-privileged attacker could exploit this weakness by manipulating a connected backend system to trigger affected functionality. This could allow arbitrary command execution on the victim's machine, leading to a high impact on the confidentiality, integrity, and availability of the affected system.

cvss

Technical severity, 0–10. One row per scoring source.

9.0

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 8.2–9

v3.19criticalCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:Hprimary · cna@sap.comexploitability 2.3 · impact 6

v3.18.2highCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.19criticalCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:Hsecondary · NCSC-NL NL

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-807USCWE-807US

affected products (20)

Products and version ranges known to be affected.

SAP Content Server, Internet Communication Manager, Web Dispatcher≤ vers:unknown/*ncsc_nlNL
SAP Extended Passport Processing≤ vers:unknown/*ncsc_nlNL
SAP GUI for Java≤ vers:unknown/*ncsc_nlNL
SAP Integration Suite≤ vers:unknown/*ncsc_nlNL
SAP Manufacturing Integration and Intelligence≤ vers:unknown/*ncsc_nlNL
SAP NetWeaver≤ vers:unknown/*ncsc_nlNL
SAP NetWeaver Business Client≤ vers:unknown/*ncsc_nlNL
SAP NetWeaver Message Server≤ vers:unknown/*ncsc_nlNL
SAP S4HANA≤ vers:unknown/*ncsc_nlNL
SAP SAP Software≤ vers:unknown/*ncsc_nlNL
SAP_SE SAP ABAP Developer Tools≤ vers:unknown/*ncsc_nlNL
SAP_SE SAP Cloud Application Programming Model (CAP)≤ vers:unknown/*ncsc_nlNL
SAP_SE SAP Extended Passport (EPP) Processing≤ vers:unknown/*ncsc_nlNL
SAP_SE SAP Integration Suite≤ vers:unknown/*ncsc_nlNL
SAP_SE SAP Manufacturing Integration and Intelligence≤ vers:unknown/*ncsc_nlNL
SAP_SE SAP NetWeaver (Message Server)≤ vers:unknown/*ncsc_nlNL
SAP_SE SAP NetWeaver (SAP GUI for Java)≤ vers:unknown/*ncsc_nlNL
SAP_SE SAP NetWeaver Business Client≤ vers:unknown/*ncsc_nlNL
SAP_SE SAP S/4HANA (Intercompany Matching and Reconciliation)≤ vers:unknown/*ncsc_nlNL
SAP_SE SAP Web Dispatcher, Internet Communication Manager and SAP Content Server≤ vers:unknown/*ncsc_nlNL

advisories (1)

Vendor and ecosystem advisories describing this.

NCSC-2026-0356Kwetsbaarheden verholpen in diverse SAP-productenNL2026-09-09csaf · ncsc_nlNL
SAP heeft kwetsbaarheden verholpen in SAP Extended Passport Protocol (EPP) processing library, SAP NetWeaver Message Server, @sap/cds-mtxs NPM library, SAP GUI for Java, SAP ABAP Development Tools voor SAP NetWeaver AS ABAP, SAP Integration Suite, SAP NetWeaver Business Client, SAP Web Dispatcher, Internet Communication Manager, SAP Content Server, SAP S/4HANA Intercompany Matching and Reconciliation module, en SAP Manufacturing Integration and Intelligence.

sources

Which sources assert this record, and when.

ncsc_nl NVD CVE.org MITRE

published 2026-09-08modified 2026-09-09

references (2) nvd

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan