VDB
CVE-2026-0486
CVE-2026-0486
PUBLISHED
CVSS 5 MEDIUM
In ABAP based SAP systems a remote enabled function module does not perform necessary authorization checks for an authenticated user resulting in disclosure of system information.This has low impact on confidentiality. Integrity and availability are not impacted.
EPSS 0.04% · 12.3th percentile
Risk Scores
CVSS 3.1
5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
EPSS Score
0.04%
12.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| SAP_SE | ABAP based SAP systems | 740, 2008_1_710, 740 |
| sap | solution_tools_plug-in | 758, 2008_1_710, 740 |
Timeline
- Feb 10, 2026 CVE Published
- Feb 10, 2026 EPSS Score
- Feb 12, 2026 EPSS Score
- Feb 14, 2026 EPSS Score
- Feb 16, 2026 EPSS Score
- Feb 17, 2026 CVE Updated
- Feb 18, 2026 EPSS Score
- Feb 20, 2026 EPSS Score
- Feb 22, 2026 EPSS Score
- Feb 24, 2026 EPSS Score
- Feb 26, 2026 EPSS Score
- Feb 28, 2026 EPSS Score