SAP-3697099 | Vulnetix

SAP-3697099 PUBLISHED

Record from sap · Published February 10, 2026

Code Injection vulnerability in SAP CRM and SAP S/4HANA (Scripting Editor) Product: SAP CRM and SAP S/4HANA (Scripting Editor) Version(s): S4FND 102, 103, 104, 105, 106, 107, 108, 109, SAP_ABA 700, WEBCUIF 700, 701, 730, 731, 746, 747, 748, 800, 801 Severity: Critical (CVSS 9.9)

Timeline

Feb 10, 2026 CVE Published

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln SAP-3697099
vulnetix vdb fixes SAP-3697099

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/SAP-3697099/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

https://www.cve.org/CVERecord?id=CVE-2026-0488 advisory
Code Injection vulnerability in SAP CRM and SAP S/4HANA (Scripting Editor) advisory
https://support.sap.com/en/my-support/knowledge-base/security-notes-news/february-2026.html advisory

Look up in the Resolve Platform →