SAP Patches CVSS 9.9 NetWeaver ABAP Flaw That Could Expose or Modify Data

SAP has released updates to fix several vulnerabilities, including a critical issue in SAP NetWeaver Application Server ABAP. This flaw, identified as CVE-2026-44747, has a CVSS score of 9.9 and is an out-of-bounds write vulnerability. It can be exploited by an authenticated attacker to cause memory corruption by leveraging logical errors in memory management. Successful exploitation could potentially expose or modify data. The vulnerability was addressed as part of SAP's July 2026 security updates.