CVE-2026-34265criticalCWE-787

CVE-2026-34265: critical vulnerability in SAP_SE SAP NetWeaver and ABAP Platform

Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform

Published · Updated

Follow this CVE+ Monitor ABAP Platform+ Monitor SAP NetWeaver

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.8epss 0.6%
SAP NetWeaver Application Server ABAP allows an unauthenticated attacker to exploit logical errors in DIAG protocol parsing, resulting in memory corruption. This vulnerability could potentially disclose sensitive system information or crash the system, leading to a high impact on the confidentiality, integrity, and availability of the application.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
SAP_SE · SAP NetWeaver and ABAP Platform
Related CVEs — SAP_SE SAP NetWeaver and ABAP Platform

In the same product, most dangerous first.

CVE-2026-76963MEDIUMMissing Authorization Check in Application Server ABAP of SAP NetWeaver and ABAP PlatformEPSS 0.3%CVE-2025-42986MEDIUMMissing Authorization check in SAP NetWeaver and ABAP PlatformEPSS 0.2%