CVE Watch28 jul 2026

CVE-2026-58246

SAP NetWeaver Application Server for ABAP and ABAP Platform writes sensitive session identifier information into a diagnostic trace when the

CVSS

4.3

Medio

EPSS

—

KEV

—

Exploit Today

0-100

Publicado: 28 jul 2026 · Última mod.: 28 jul 2026 · CWE-497

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

SAP NetWeaver Application Server for ABAP and ABAP Platform writes sensitive session identifier information into a diagnostic trace when the trace is activated by a privileged user. An attacker with access to the resulting trace data could obtain identifiers that allow impersonation of legitimate users during their validity period. This leads to high impact on confidentiality. Integrity and availability are not impacted.

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-664385.3 MED

9.8%

——3Unauthenticated Sensitive Data Exposure in Exclusive Addons Elementor <= 2.8.0 versions.2d CVE-2026-655645.3 MED

9.8%

——3Unauthenticated Sensitive Data Exposure in MapPress Maps for WordPress <= 2.97.6 versions.2d CVE-2026-595487.5 ALT

22.6%

——7Unauthenticated Sensitive Data Exposure in Byteflows Travel & Hotel Booking <= 1.0.0 versions.2d CVE-2026-595287.5 ALT

32.5%

——10Subscriber Sensitive Data Exposure in ShipTime: Discounted Shipping Rates <= 1.1.1 versions.2d CVE-2025-59178—

4.3%

——1Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain an Exposure of Sensitive System Information vulnerability in Configuration Management allowing an attacker to enumerate other users on the system.23h CVE-2026-449555.3 MED

10.9%

——3Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could allow for asset discovery by unauthenticated users.2d