Warning: Critical Memory Corruption Vulnerability In SAP Extended Passport Processing (EPP) Fixed in SAP Patch Day, Patch Immediately!

CVE-2026-44756 is a critical (CVSS 10.0) memory-corruption vulnerability in SAP Extended Passport processing within the SAP kernel that can be exploited remotely without authentication via HTTP, SAP GUI or RFC to execute operating system commands with SAP administrative privileges; it affects many SAP products (S/4HANA, ERP, NetWeaver, Web Dispatcher, etc.). SAP and the Centre for Cybersecurity Belgium recommend immediate patching and enhanced monitoring/detection, noting that applying updates is the primary mitigation.