CVE-2026-44747
CriticalCVSS 9.9Exploitation Probability (EPSS)
Low risk42th percentile - higher than 42% of all known CVEs
Summary
An authenticated attacker can exploit logical errors in memory management in SAP NetWeaver Application Server ABAP, causing memory corruption. This could lead to unauthorized data access, modification, or system unavailability.
Risk Assessment
The vulnerability has a high impact on the confidentiality, integrity, and availability of the application, potentially resulting in sensitive data leakage, data manipulation, or system downtime.
Recommendation
Apply the security patch provided by SAP in the corresponding security note immediately. Restricting system access to trusted users can reduce the risk.
Original NVD description (English source)
SAP NetWeaver Application Server ABAP allows an authenticated attacker to leverage logical errors in memory management to cause a memory corruption that could lead to unauthorized data access, modification, or system unavailability. This has high impact on confidentiality, integrity, and availability of the application.