CVE-2026-27671— Memory Corruption vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform
Quick assessment
Affected
SAP_SE SAP NetWeaver AS ABAP and ABAP Platform
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
SAP NetWeaver ABAP Platform是德国思爱普（SAP）公司的一个一体化技术平台。 SAP NetWeaver ABAP Platform 存在安全漏洞，该漏洞源于RFC协议验证不当，可能导致未经身份验证的攻击者发送特制RFC请求，利用内存管理逻辑错误导致内存损坏，对应用机密性、完整性和可用性造成高影响。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 13
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| SAP_SE | SAP NetWeaver AS ABAP and ABAP Platform | KRNL64NUC 7.22 |
affected |
7.22EXT |
affected | ||
KRNL64UC 7.22 |
affected | ||
722EXT |
affected | ||
7.53 |
affected | ||
KERNEL 7.22 |
affected | ||
7.54 |
affected | ||
7.77 |
affected | ||
| … +5 more rows | |||
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-27671
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Memory Corruption vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform
Source: CVE Program / CVE List V5
Vulnerability Description
Due to improper RFC protocol validation in the SAP Kernel used by the Application Server ABAP of SAP NetWeaver and ABAP Platform, an unauthenticated attacker can send a crafted RFC request that exploits logical errors in memory management, leading to memory corruption. This could lead to a high impact on the confidentiality, integrity, and availability of the application.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
栈缓冲区溢出
Source: CVE Program / CVE List V5
Vulnerability Title
SAP NetWeaver ABAP Platform 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SAP NetWeaver ABAP Platform是德国思爱普（SAP）公司的一个一体化技术平台。 SAP NetWeaver ABAP Platform 存在安全漏洞，该漏洞源于RFC协议验证不当，可能导致未经身份验证的攻击者发送特制RFC请求，利用内存管理逻辑错误导致内存损坏，对应用机密性、完整性和可用性造成高影响。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| SAP_SE | SAP NetWeaver AS ABAP and ABAP Platform | KRNL64NUC 7.22 | - |
|
II. Public POCs for CVE-2026-27671
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-27671
请登录查看更多情报信息。
Vendor Pages for CVE-2026-27671 (1)
Same Patch Batch · SAP_SE · 2026-06-09 · 12 CVEs total
| CVE-2026-44748 | 9.9 CRITICAL | XML Signature Wrapping in SAML Authentication in SAP NetWeaver AS ABAP and ABAP Platform |
| CVE-2026-40128 | 9.0 CRITICAL | Directory Traversal vulnerability in SAP NetWeaver Application Server Java (Web Container) |
| CVE-2026-44751 | 7.1 HIGH | Missing Authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform |
| CVE-2026-44754 | 6.6 MEDIUM | Missing caller identification check-in for ODP Data Replication APIs |
| CVE-2026-44744 | 6.5 MEDIUM | SQL Injection vulnerability in SAP S/4HANA |
| CVE-2026-44746 | 6.1 MEDIUM | Reflected Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS Java (JDBC Test Ser |
| CVE-2026-44757 | 4.7 MEDIUM | Cross-Site Scripting (XSS) vulnerability in SAP Wily Introscope Enterprise Manager |
| CVE-2026-44750 | 4.3 MEDIUM | Missing Authorization check in SAP MDG (Review Match Groups Application) |
| CVE-2026-44755 | 4.3 MEDIUM | Email Spoofing vulnerability in SAP Business Objects Business Intelligence Platform |
| CVE-2026-24315 | 4.2 MEDIUM | Path Traversal Vulnerability in SAP Fiori (launchpad) |
| CVE-2026-44743 | 3.7 LOW | Security Misconfiguration vulnerability in SAP Business Objects |
IV. Related Vulnerabilities
Same product: SAP NetWeaver AS ABAP and ABAP Platform
-
CVE-2026-44751
Missing Authorization check in Application Server ABAP of SA -
CVE-2026-44748
XML Signature Wrapping in SAML Authentication in SAP NetWeav -
CVE-2026-23687
XML Signature Wrapping in SAP NetWeaver AS ABAP and ABAP Pla -
CVE-2025-42902
Memory Corruption vulnerability in SAP Netweaver AS ABAP and -
CVE-2025-0063
SQL Injection vulnerability in SAP NetWeaver AS for ABAP and
Same vendor: SAP_SE
-
CVE-2026-76974
Information Disclosure vulnerability in SAP Fiori Launchpad -
CVE-2026-76977
Clickjacking vulnerability in SAPUI5(Frame Options Allowlist -
CVE-2026-76971
Server-Side Request Forgery in SAP Manufacturing Integration -
CVE-2026-76969
Credential disclosure in multitenant applications using SAP -
CVE-2026-76968
Information Disclosure vulnerability in SAP Web Dispatcher,
Same weakness: CWE-121
-
CVE-2026-66837
Apache Thrift: PHP accelerator sizes a stack buffer from a w -
CVE-2026-104611
Tenda AC9 POST Request fast_setting_internet_set stack-based -
CVE-2026-104610
Tenda HG7/HG9/HG10 Boa Web Server formLoopBack boaGetVar sta -
CVE-2026-86325
协议网关账户管理接口栈溢出漏洞 -
CVE-2026-93925
Apache Thrift: C++ `THeaderTransport::writeVarint32()` stack
V. Comments for CVE-2026-27671
No comments yet