CRITICAL CWE-787
CVE-2026-44747
Memory Corruption vulnerability in SAP NetWeaver Application Server ABAP
SAP·NetWeaver Application Server ABAP
9.9/ 10
CVSS 3.1
Critical severity
0.56%
EPSS exploit odds
Chance of exploitation in the next 30 days
Higher than 47% of all CVEs
Not listed
CISA KEV catalog
No confirmed in-the-wild exploitation on CISA's list.
Timeline
- Published
- Jul 14, 2026
- Updated
- Jul 29, 2026
- First covered
- Jul 14, 2026
- Latest story
- 4 months ago
Summary
SAP NetWeaver Application Server ABAP allows an authenticated attacker to leverage logical errors in memory management to cause a memory corruption that could lead to unauthorized data access, modification, or system unavailability. This has high impact on confidentiality, integrity, and availability of the application.
CWE-787Out-of-bounds Write
Attack profile
Attack vectorNetwork
ComplexityLow
PrivilegesLow
User interactionNone
ScopeChanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:HAffected products
- SAP NetWeaver Application Server ABAPKRNL64NUC 7.227.22EXTKRNL64UC 7.227.53