Quick answers
- Is CVE-2026-76968 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-76968 being exploited in the wild.
- How severe is CVE-2026-76968?
- Medium severity, with a CVSS score of 6.5, published 8 September 2026.
- Which products and versions are affected?
- SAP Web Dispatcher; SAP Internet Communication Manager; SAP Content Server.
- Is there a fix for CVE-2026-76968?
- A patch was published on 2026-09-08: SAP Security Note 3750721 available Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
- How is CVE-2026-76968 attacked?
- It is attacked over the network, in a hosted service.
- Am I affected by CVE-2026-76968?
- Check whether you run SAP Content Server, SAP Internet Communication Manager or SAP Web Dispatcher. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
This is an information disclosure vulnerability affecting SAP's web communication components. An authenticated attacker with low-privilege credentials can access administrative functionality and retrieve sensitive system state information through improper access controls. The vulnerability requires prior authentication but does not require elevated privileges. The disclosed information could facilitate reconnaissance for subsequent attacks, though the vulnerability itself does not enable code execution, data modification, or service disruption. A patch is available via SAP Security Note 3750721 published on 2026-09-08 as part of SAP's regular Security Patch Day.
Affected products
- SAP Web Dispatcher
- SAP Internet Communication Manager
- SAP Content Server
Timeline
- 2026-09-08: disclosed: Published as part of SAP Security Patch Day
- 2026-09-08: patched: SAP Security Note 3750721 available