What is the CVSS score of CVE-2026-23687?

CVE-2026-23687 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Jwt Attack are affected by CVE-2026-23687?

SAP Basis systems running version 700 and earlier are vulnerable to cryptographic signature bypass attacks that could allow unauthorized code execution or system compromise.

How to fix or mitigate CVE-2026-23687?

Within 24 hours: Inventory all SAP Basis installations and identify systems running version 700 or earlier; notify SAP support and begin emergency patching assessment. Within 7 days: Implement network segmentation to isolate affected SAP systems; enable enhanced logging and monitoring for suspicious signature verification failures; restrict administrative access. Within 30 days: Develop and execute a phased upgrade plan to SAP Basis versions beyond 700; conduct post-remediation security testing and validation.

Jwt Attack CVE-2026-23687

HIGH

Improper Verification of Cryptographic Signature (CWE-347)

2026-02-10 cna@sap.com

SAP Authentication Bypass Jwt Attack

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:02 vuln.today

CVE Published

Feb 10, 2026 - 04:16 nvd

HIGH 8.8

DescriptionCVE.org

SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated attacker with normal privileges to obtain a valid signed message and send modified signed XML documents to the verifier. This may result in acceptance of tampered identity information, unauthorized access to sensitive user data and potential disruption of normal system usage.

AnalysisAI

Sap Basis versions up to 700 is affected by improper verification of cryptographic signature (CVSS 8.8).

Technical ContextAI

This vulnerability (CWE-347: Improper Verification of Cryptographic Signature) affects Sap Basis. SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated attacker with normal privileges to obtain a valid signed message and send modified signed XML documents to the verifier. This may result in acceptance of tampered identity information, unauthorized access to sensitive user data and potential disruption of normal system usage.