CVE-2026-34265
CriticalCVSS 9.8Summary
SAP NetWeaver Application Server ABAP is vulnerable to logical errors in DIAG protocol parsing, allowing an unauthenticated attacker to cause memory corruption. This could potentially disclose sensitive system information or crash the system, leading to high impact on confidentiality, integrity, and availability.
Risk Assessment
An attacker can access sensitive data or cause system unavailability, disrupting application and services.
Recommendation
Apply security patches from SAP and monitor the system for unusual behavior.
Original NVD description (English source)
SAP NetWeaver Application Server ABAP allows an unauthenticated attacker to exploit logical errors in DIAG protocol parsing, resulting in memory corruption. This vulnerability could potentially disclose sensitive system information or crash the system, leading to a high impact on the confidentiality, integrity, and availability of the application.