Vulnerability intelligence
CVE-2026-44756
A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Under specific conditions, an unauthenticated attacker could exploit a crafted network request containing a malformed EPP header, potentially resulting in undefined behavior and abnormal program termination. Successful exploitation may have a high impact on the confidentiality, integrity, and availability of the application.
CVSS Score
10
Critical
EPSS — Exploit Probability
0.7%
Riskier than 51% of all CVEs · checked 2026-10-20
Exploitation
Not in CISA KEV
KEV does not include every exploited vulnerability
Remediation
unknown
Check vendor advisories
5 articles across 4 outlets · first covered Sep 8, 2026 · latest Sep 18, 2026
Associated threat actors
Coverage timeline
-
Ukrainian Ransomware Developer Gets 13 Years Over $123m Attackswww.securityweek.com · Sep 18, 2026
-
SAP Patches Critical SAP Flaws Enabling Unauthenticated RCEthehackernews.com · Sep 9, 2026
-
Over 10,000 SAP Systems Exposed to Critical Kernel Flawwww.infosecurity-magazine.com · Sep 9, 2026
-
SAP Fixes Critical EPP Flaw Allowing Full System Compromisewww.securityweek.com · Sep 8, 2026
-
SAP Patches Critical EPP Flaw Exposing Systems to Memory Corruptionsecurityonline.info · Sep 8, 2026