CVE-2026-34265criticalCWE-787

CVE-2026-34265: fallo crítico en SAP_SE SAP NetWeaver and ABAP Platform

Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear ABAP Platform+ Monitorear SAP NetWeaver

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 9.8epss 0.6%
SAP NetWeaver Application Server ABAP allows an unauthenticated attacker to exploit logical errors in DIAG protocol parsing, resulting in memory corruption. This vulnerability could potentially disclose sensitive system information or crash the system, leading to a high impact on the confidentiality, integrity, and availability of the application.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
SAP_SE · SAP NetWeaver and ABAP Platform
CVEs relacionadas — SAP_SE SAP NetWeaver and ABAP Platform

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-76963MEDIUMMissing Authorization Check in Application Server ABAP of SAP NetWeaver and ABAP PlatformEPSS 0.3%CVE-2025-42986MEDIUMMissing Authorization check in SAP NetWeaver and ABAP PlatformEPSS 0.2%