CyberSecurity News

SAP Patches CVSS 10.0 Kernel Flaw Enabling Unauthenticated Remote Code Execution

The Hacker News

· September 9, 2026

AI summary

SAP has issued security updates to fix several vulnerabilities, including a severe flaw in SAP Extended Passport Processing. This flaw, identified as CVE-2026-44756 with a CVSS score of 10.0, is a memory corruption issue that could significantly impact application confidentiality, integrity, and availability. It was discovered and reported by SAP itself. The vulnerability could enable unauthenticated remote code execution. SAP has taken steps to address this and other vulnerabilities through the release of security updates.

Vulnerabilities mentioned

CVE-2026-44756

CRITICAL

CVSS 10

A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Under specific conditions, an unauthenticated attacker could exploit a crafted network request containing a malformed EPP header, potentially resulting in undefined behavior and abnormal program termination. Successful exploitation may have a high impact on the confidentiality, integrity, and availability of the application.

Read the full article at The Hacker Newsthehackernews.com/2026/09/sap-patches-cvss-100-kernel-flaw.html

This is an AI-generated brief aggregated by HackerFeeds for convenience and grounded in the source’s own summary; the related CVE, threat-group and country data is from HackerFeeds’ own indexes. The original article is the authoritative source — all rights belong to The Hacker News.