AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

SAPCVE-2026-76968

SAP Web Dispatcher, Internet: information disclosure

SAP

CVE-2026-76968 · Published Sep 8, 2026

Medium6.5
No fix yet
SAP advisory

SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an authenticated low-privileged attacker to access certain administrative functionality or interface and obtain sensitive information about the system state, resulting in information disclosure. This disclosed information could potentially be used to facilitate further attacks. This vulnerability has a high impact on the confidentiality of the application, with no impact on integrity or availability.

Affected versions

PackageAffectedFixed in
SAP Web Dispatcher, Internet Communication Manager and SAP Content Server
Product
<= KRNL64NUC 7.22No fix yet
<= 7.22EXTNo fix yet
<= KRNL64UC 7.22No fix yet
<= 7.53No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-497

More SAP advisories

All SAP