What is CVE-2026-76968?

CVE-2026-76968 is a medium-severity vulnerability in SAP Se Web Dispatcher, Internet Communication Manager And Content Server, classified under Exposure of Sensitive System Information to an Unauthorized Control Sphere. CVSS score: 6.5/10. Published 2026-09-08.

How severe is CVE-2026-76968?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in SAP Se Web Dispatcher, Internet Communication Manager And Content Server

CVE-2026-76968

SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an authenticated low-privileged attacker to access certain administrative functionality or interface and obtain sensitive information about the system state, resulting in information disclosure. This disclosed information could potentially be used to facilitate further attacks. This vulnerability has a high impact on the confidentiality of the application, with no impact on integrity or availability.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Sap_se Sap Web Dispatcher, Internet Communication Manager And Content Server — versions 7.22EXT, 7.53, 7.54

Weakness classification (CWE)

CWE-497 — Exposure of Sensitive System Information to an Unauthorized Control Sphere

References

Frequently asked questions

What is CVE-2026-76968?: CVE-2026-76968 is a medium-severity vulnerability in SAP Se Web Dispatcher, Internet Communication Manager And Content Server, classified under Exposure of Sensitive System Information to an Unauthorized Control Sphere. CVSS score: 6.5/10. Published 2026-09-08.
How severe is CVE-2026-76968?: Medium severity. CVSS v3 base score is 6.5 out of 10.