CVE-2026-0510

The record

The User Management Engine (UME) in NetWeaver Application Server for Java (NW AS Java) utilizes an obsolete cryptographic algorithm for encrypting User Mapping data. This weakness could allow an attacker with high-privileged access to exploit the vulnerability under specific conditions potentially leading to partial disclosure of sensitive information.This has low impact on confidentiality with no impact on integrity and availability of the application.

Affected packages

Related vulnerabilities

• CVE-2026-112026 A security vulnerability has been detected in light0011 cms… CWE-326
• CVE-2026-77405 RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. CWE-326
• CVE-2026-86670 A flaw has been found in aircheng-org iWebShop-5 up to 5.15. CWE-326
• CVE-2026-17520 The Newsletters WordPress plugin before 4.17 does not generate its API key using a… CWE-326
• CVE-2026-47842 Applications using AesBytesEncryptor with the two-argument constructor or when passing a… CWE-326
• CVE-2026-79084 Inadequate encryption strength in Notifications in Google Chrome on on Windows prior to… CWE-326
• CVE-2026-74889 openssl_encrypt versions before 1.4.0 use HKDF with no salt and static info parameter in… CWE-326
• CVE-2026-65777 Inadequate encryption strength in Windows Active Directory allows an authorized attacker… CWE-326