CVE-2026-34265criticalCWE-787

CVE-2026-34265: falha crítica em SAP_SE SAP NetWeaver and ABAP Platform

Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar ABAP Platform+ Monitorar SAP NetWeaver

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.8epss 0.6%
SAP NetWeaver Application Server ABAP allows an unauthenticated attacker to exploit logical errors in DIAG protocol parsing, resulting in memory corruption. This vulnerability could potentially disclose sensitive system information or crash the system, leading to a high impact on the confidentiality, integrity, and availability of the application.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
SAP_SE · SAP NetWeaver and ABAP Platform
CVEs relacionadas — SAP_SE SAP NetWeaver and ABAP Platform

No mesmo produto, das mais perigosas para as menos.

CVE-2026-76963MEDIUMMissing Authorization Check in Application Server ABAP of SAP NetWeaver and ABAP PlatformEPSS 0.3%CVE-2025-42986MEDIUMMissing Authorization check in SAP NetWeaver and ABAP PlatformEPSS 0.2%