What is CVE-2026-58236?

CVE-2026-58236 is a medium-severity vulnerability in Sap_se Sap Netweaver Application Server Abap And Platform, classified under OS Command Injection. CVSS score: 5.5/10. Published 2026-08-11.

How severe is CVE-2026-58236?

Medium severity. CVSS v3 base score is 5.5 out of 10.

RCE in Sap_se Sap Netweaver Application Server Abap And Platform

CVE-2026-58236

SAP NetWeaver Application Server ABAP and ABAP Platform allow an attacker with high privileges to bypass missing security controls on an internal code path leading to operating system command execution. Successful exploitation could allow…

Vulnerability class: Command Injection (OS Command Injection)

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H.

Affected products

Sap_se Sap Netweaver Application Server Abap And Platform — versions KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22

Weakness classification (CWE)

CWE-78 — OS Command Injection

References

Frequently asked questions

What is CVE-2026-58236?: CVE-2026-58236 is a medium-severity vulnerability in Sap_se Sap Netweaver Application Server Abap And Platform, classified under OS Command Injection. CVSS score: 5.5/10. Published 2026-08-11.
How severe is CVE-2026-58236?: Medium severity. CVSS v3 base score is 5.5 out of 10.