Search CVEs, research… / diras.sa

VENDOR

SAP vulnerabilities: CVEs, exploitation and patches

Every SAP CVE reviewed by Diras Labs analysts, newest first, with exploitation status and fixes.

  1. CVE-2026-76969
    SAP Cloud Application Programming Model unauthenticated credential disclosure SAP SAP Cloud Application Programming Model (CAP) ·
    CRITICAL 9.4
  2. CVE-2026-44756
    SAP Extended Passport (EPP) Processing memory safety flaw allows unauthenticated remote crash SAP SAP Extended Passport (EPP) Processing ·
    CRITICAL 10
  3. CVE-2026-34265
    SAP NetWeaver and ABAP Platform DIAG parsing memory corruption vulnerability SAP SAP NetWeaver and ABAP Platform ·
    CRITICAL 9.8
  4. CVE-2026-58240
    SAP NetWeaver Message Server component registration bypass allows unauthorized actions SAP SAP NetWeaver (Message Server) ·
    CRITICAL 9.8
4 CVEs · page 1 of 1