CVE-2026-0490

Description

SAP BusinessObjects BI Platform allows an unauthenticated attacker to craft a specific network request to the trusted endpoint that breaks the authentication, which prevents the legitimate users from accessing the platform. As a result, it has a high impact on the availability but no impact on the confidentiality and integrity.

PUBLISHED Reserved 2025-12-09 | Published 2026-02-10 | Updated 2026-02-10 | Assigner sap

Problem types

CWE-862: Missing Authorization

Product status

References

me.sap.com/notes/3654236

url.sap/sapsecuritypatchday

cve.org (CVE-2026-0490)

nvd.nist.gov (CVE-2026-0490)

Download JSON