CVE-2026-40130
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
SAP SAPSPrint Service has memory corruption vulnerabilities in the handling of certain commands. An unauthenticated attacker could send specially crafted requests that trigger a buffer overflow in the affected component. This causes a temporary service interruption and automatic restart, resulting in low impact on availability but no impact on confidentiality and integrity.
Risk Assessment
The risk for the organization is potential service interruptions of SAPSPrint, which may affect business processes dependent on printing. No impact on confidentiality and integrity limits the severity.
Recommendation
Apply SAP patches for SAPSPrint Service and restrict access to the service to trusted networks only. Monitor logs for unusual requests that may indicate exploitation attempts.
Original NVD description (English source)
SAP SAPSPrint Service has memory corruption vulnerabilities in the handling of certain commands. An unauthenticated attacker could send specially crafted requests that trigger a buffer overflow in the affected component. This causes a temporary service interruption and automatic restart, resulting in low impact on availability but no impact on confidentiality and integrity.