AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

SAPCVE-2026-44756

SAP Extended Passport (EPP) Processing: buffer overflow

SAP

CVE-2026-44756 · Published Sep 8, 2026 · updated Sep 22, 2026

Critical10.0
No fix yet
SAP advisory

A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Under specific conditions, an unauthenticated attacker could exploit a crafted network request containing a malformed EPP header, potentially resulting in undefined behavior and abnormal program termination. Successful exploitation may have a high impact on the confidentiality, integrity, and availability of the application.

Affected versions

PackageAffectedFixed in
SAP Extended Passport (EPP) Processing
Product
<= KRNL64NUC 7.22No fix yet
<= 7.22EXTNo fix yet
<= KRNL64UC 7.22No fix yet
<= 7.53No fix yet
Details and references

More SAP advisories

All SAP