CVE-2026-34265CWE-787

CVE-2026-34265

Critical · published August 11, 2026

CVSS v3.1
9.8
EPSS
1%
Percentile
50.1
In the wild
Unconfirmed
What it is

SAP NetWeaver Application Server ABAP allows an unauthenticated attacker to exploit logical errors in DIAG protocol parsing, resulting in memory corruption. This vulnerability could potentially disclose sensitive system information or crash the system, leading to a high impact on the confidentiality, integrity, and availability of the application.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00642 · 50.1th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-08-11T05:17Z
References (2)
https://me.sap.com/notes/3714806 · [email protected]https://url.sap/sapsecuritypatchday · [email protected]
EPSS history
Timeline
  • 11 AUG 00:10Z
    Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform
    cvelistv5