CVE-2026-0492

SAP HANA database is vulnerable to privilege escalation allowing an attacker with valid credentials of any user to switch to another user potentially gaining administrative access. This exploit could result in a total compromise of the system�s confidentiality, integrity, and availability.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://me.sap.com/notes/3691059	Permissions Required
https://url.sap/sapsecuritypatchday	Patch

Configurations

Configuration 1 (hide)

cpe:2.3:a:sap:hana_database:2.00:*:*:*:*:*:*:*

History

17 Jun 2026, 10:10

Type	Values Removed	Values Added
Summary		(es) La base de datos SAP HANA es vulnerable a la escalada de privilegios, permitiendo a un atacante con credenciales válidas de cualquier usuario cambiar a otro usuario, potencialmente obteniendo acceso administrativo. Este exploit podría resultar en un compromiso total de la confidencialidad, integridad y disponibilidad del sistema.

27 Jan 2026, 20:18

Type	Values Removed	Values Added
CPE		cpe:2.3:a:sap:hana_database:2.00:::::::*
References	~~() https://me.sap.com/notes/3691059 -~~	() https://me.sap.com/notes/3691059 - Permissions Required
References	~~() https://url.sap/sapsecuritypatchday -~~	() https://url.sap/sapsecuritypatchday - Patch
First Time		Sap hana Database Sap

13 Jan 2026, 02:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-01-13 02:15

Updated : 2026-06-17 10:10

NVD link : CVE-2026-0492

Mitre link : CVE-2026-0492

CVE.ORG link : CVE-2026-0492

JSON object : View

Products Affected

sap

hana_database

CWE

CWE-306

Missing Authentication for Critical Function

{"id": "CVE-2026-0492", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-0492", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-01-14T04:57:12.253896Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "cna@sap.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "affected": [{"source": "cna@sap.com", "affectedData": [{"vendor": "SAP_SE", "product": "SAP HANA database", "versions": [{"status": "affected", "version": "HDB 2.00"}], "defaultStatus": "unaffected"}]}], "published": "2026-01-13T02:15:51.243", "references": [{"url": "https://me.sap.com/notes/3691059", "tags": ["Permissions Required"], "source": "cna@sap.com"}, {"url": "https://url.sap/sapsecuritypatchday", "tags": ["Patch"], "source": "cna@sap.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "cna@sap.com", "description": [{"lang": "en", "value": "CWE-306"}]}], "descriptions": [{"lang": "en", "value": "SAP HANA database is vulnerable to privilege escalation allowing an attacker with valid credentials of any user to switch to another user potentially gaining administrative access. This exploit could result in a total compromise of the system\ufffds confidentiality, integrity, and availability."}, {"lang": "es", "value": "La base de datos SAP HANA es vulnerable a la escalada de privilegios, permitiendo a un atacante con credenciales v\u00e1lidas de cualquier usuario cambiar a otro usuario, potencialmente obteniendo acceso administrativo. Este exploit podr\u00eda resultar en un compromiso total de la confidencialidad, integridad y disponibilidad del sistema."}], "lastModified": "2026-06-17T10:10:50.320", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:sap:hana_database:2.00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4C6CA542-7071-48B6-B135-3AE9B4BB1DC5"}], "operator": "OR"}]}], "sourceIdentifier": "cna@sap.com"}