CVE-2026-44747

CVE Enrichment

CVSS: 9.9 CRITICAL
EPSS: 0.56%
EPSS Percentile: 46.68%
CISA KEV: Not listed

Description

SAP NetWeaver Application Server ABAP allows an authenticated attacker to leverage logical errors in memory management to cause a memory corruption that could lead to unauthorized data access, modification, or system unavailability. This has high impact on confidentiality, integrity, and availability of the application.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: [email protected]
Published: 14-Jul-2026 08:16
Last Modified: 25-Oct-2026 05:10
EPSS Date: 2026-10-27
CWE: CWE-787

CVSS Vector


            CVSS:3.1                            AV:N /
                            AC:L /
                            PR:L /
                            UI:N /
                            S:C /
                            C:H /
                            I:H /
                            A:H

References

Last enrichment sync: 28-Oct-2026 20:31
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (3)

SAP’s July 2026 security updates fix multiple critical flaws, including CVE-2026-44747 in SAP NetWeaver Application Server ABAP, which could lead to memory corruption and unauthorized access. SAP Patches Critical NetWeaver ABAP Flaw and Two Other Vulnerabilities
SAP also addressed a fresh assortment of vulnerabilities Tuesday, including critical defects CVE-2026-44747 in SAP NetWeaver Application Server and CVE-2026-27690 in SAP Approuter. Microsoft patches 622 vulnerabilities, including two exploited zero-days
#SAPNetWeaver SAP patches 16 flaws in July updates, including three critical vulnerabilities

CVE (4)

People (2)

MITRE ATT&CK (2)

Vendors (2)

Products (10)

Tools (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.