2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
31 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-89126 SAP Web Dispatcher | CRITICAL10.0 | SAP Web Dispatcher | CWE-122 Heap Buffer Overflow | n/a | Nov 10, 2026 |
| CVE-2026-89119 SAP product | CRITICAL9.6 | SAP product | CWE-352 Cross Site Request Forgery | n/a | Nov 10, 2026 |
| CVE-2026-89114 SAP NetWeaver AS Java EDM Application | HIGH7.5 | SAP NetWeaver AS Java EDM Application | CWE-862 Missing Authorization | n/a | Nov 10, 2026 |
| CVE-2026-89103 SAP product | CRITICAL10.0 | SAP product | CWE-863 Incorrect Authorization | n/a | Nov 10, 2026 |
| CVE-2026-76973 SAP product | HIGH7.5 | SAP product | CWE-190 Integer Overflow | n/a | Nov 10, 2026 |
| CVE-2026-76970 SAP product | HIGH7.5 | SAP product | CWE-787 Out of Bounds Write | n/a | Nov 10, 2026 |
| CVE-2026-76966 SAP product | HIGH8.9 | SAP product | CWE-294 | n/a | Nov 10, 2026 |
| CVE-2026-76965 SAP NetWeaver Application Server ABAP and ABAP Platform | CRITICAL9.9 | SAP NetWeaver Application Server ABAP and ABAP Platform | CWE-749 | n/a | Nov 10, 2026 |
| CVE-2026-76964 SAP NetWeaver Application Server ABAP | CRITICAL10.0 | SAP NetWeaver Application Server ABAP | CWE-1287 | n/a | Nov 10, 2026 |
| CVE-2026-120017 SAP NetWeaver AS ABAP and ABAP Platform | CRITICAL10.0 | SAP NetWeaver AS ABAP and ABAP Platform | CWE-347 | n/a | Nov 10, 2026 |
| CVE-2026-120015 SAP Host Agent | HIGH7.5 | SAP Host Agent | CWE-427 | n/a | Nov 10, 2026 |
| CVE-2026-120014 SAP HANA XSA Web Dispatcher | HIGH7.6 | SAP HANA XSA Web Dispatcher | CWE-352 Cross Site Request Forgery | n/a | Nov 10, 2026 |
| CVE-2026-120010 SAP NetWeaver Application Server | HIGH7.5 | SAP NetWeaver Application Server | CWE-131 | n/a | Nov 10, 2026 |
| CVE-2026-120009 SAP ABAP Developer Tools | HIGH7.2 | SAP ABAP Developer Tools | CWE-94 Code Injection | n/a | Nov 10, 2026 |
| CVE-2026-120008 SAP NetWeaver | HIGH8.2 | SAP NetWeaver | CWE-787 Out of Bounds Write | n/a | Nov 10, 2026 |
| CVE-2026-109807 SAP NetWeaver | HIGH7.5 | SAP NetWeaver | CWE-190 Integer Overflow | n/a | Nov 10, 2026 |
| CVE-2026-109806 SAP NetWeaver | HIGH7.5 | SAP NetWeaver | CWE-125 Out of Bounds Read | n/a | Nov 10, 2026 |
| CVE-2026-109804 SAP Message Server | HIGH7.5 | SAP Message Server | CWE-908 | n/a | Nov 10, 2026 |
| CVE-2026-109803 SAP NetWeaver Knowledge Management | CRITICAL9.9 | SAP NetWeaver Knowledge Management | CWE-94 Code Injection | n/a | Nov 10, 2026 |
| CVE-2026-109800 SAP Web Dispatcher | HIGH7.7 | SAP Web Dispatcher | CWE-121 Stack Buffer Overflow | n/a | Nov 10, 2026 |
| CVE-2026-109799 SAP Cloud SDK for Python | HIGH7.5 | SAP Cloud SDK for Python | CWE-347 | n/a | Nov 10, 2026 |
| CVE-2026-109798 SAP BusinessObjects Business Intelligence Platform | CRITICAL9.1 | SAP BusinessObjects Business Intelligence Platform | CWE-611 XML External Entity | n/a | Nov 10, 2026 |
| CVE-2026-109797 SAP product | HIGH7.1 | SAP product | CWE-1220 | n/a | Nov 10, 2026 |
| CVE-2026-109795 SAP NetWeaver | CRITICAL9.9 | SAP NetWeaver | CWE-94 Code Injection | n/a | Nov 10, 2026 |
| CVE-2026-109794 SAP product | HIGH7.5 | SAP product | CWE-835 | n/a | Nov 10, 2026 |
| CVE-2026-109793 SAP product | HIGH7.5 | SAP product | CWE-121 Stack Buffer Overflow | n/a | Nov 10, 2026 |
| CVE-2026-23689 Sap Advanced Planning And Optimization | HIGH7.7 | Sap Advanced Planning And Optimization | CWE-606 | 0.4% | Feb 10, 2026 |
| CVE-2026-0508 Sap Businessobjects Business Intelligence Platform | HIGH7.3 | Sap Businessobjects Business Intelligence Platform | CWE-601 Open Redirect | 0.3% | Feb 10, 2026 |
| CVE-2026-0488 Sap Netweaver Application Server Abap | CRITICAL9.9 | Sap Netweaver Application Server Abap | CWE-862 Missing Authorization | 0.5% | Feb 10, 2026 |
| CVE-2026-0500 Sap Introscope Enterprise Manager | CRITICAL9.6 | Sap Introscope Enterprise Manager | CWE-94 Code Injection | 0.4% | Jan 13, 2026 |
| CVE-2026-0498 Sap S/4 Hana | CRITICAL9.1 | Sap S/4 Hana | CWE-94 Code Injection | 0.5% | Jan 13, 2026 |
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications