9.8 CriticalCWE-121
CVE-2026-27671
Memory Corruption vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform
SAP_SESAP NetWeaver AS ABAP and ABAP Platform
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 23 Oct
0.6%probability of exploitation in the next 30 days
Higher than 49% of scored CVEs
SeverityCVSS
9.8Critical
Description NVD
Due to improper RFC protocol validation in the SAP Kernel used by the Application Server ABAP of SAP NetWeaver and ABAP Platform, an unauthenticated attacker can send a crafted RFC request that exploits logical errors in memory management, leading to memory corruption. This could lead to a high impact on the confidentiality, integrity, and availability of the application.
Coverage No articles yet
No CyberSIXT article names CVE-2026-27671 yet. New articles appear here and in the RSS feed.