A Vulnerability in SAP Extended Passport (EPP) Processing Could Allow for Remote Code Execution
ID: 42a906ac-060b-5953-96ab-147d3973f4bf
STIX ID: report--42a906ac-060b-5953-96ab-147d3973f4bf
Feed Name: CISecurity.org Advisories
A critical deserialization vulnerability (CVE-2026-44756) in SAP Extended Passport (EPP) Processing allows unauthenticated remote code execution by sending malformed EPP headers; the missing boundary validation can cause memory safety violations and arbitrary OS command execution with SAP administrative privileges. Onapsis identifies three confirmed access vectors — the web (HTTP/S) layer, the SAP GUI Dispatcher, and the RFC layer — meaning publicly exposed SAP services and internal integrations running the default SAP kernel code are at risk of full compromise.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.