CVE-2026-27675CWE-94

Code Injection vulnerability in SAP Landscape Transformation

Low · published April 14, 2026

CVSS v3.1
2.0
EPSS
0%
Percentile
14.6
In the wild
Unconfirmed
What it is

SAP Landscape Transformation contains a vulnerability in an RFC-exposed function module that could allow a high privileged adversary to inject arbitrary ABAP code and operating system commands. Due to this, some information could be modified, but the attacker does not have control over kind or degree. This leads to a low impact on integrity, while confidentiality and availability are not impacted.

The record
Technical detail
CVSS v3.1
2.0 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00243 · 14.6th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2026-04-14T00:07Z
EPSS history
Timeline
  • 14 APR 00:07Z
    Code Injection vulnerability in SAP Landscape Transformation
    cvelistv5