Skip to content
OpenAdvisories
Critical · 9.1 CVE-2026-27685 EUVD-2026-10456GHSA-8cwx-3wjm-cxxv

Insecure Deserialization in SAP NetWeaver Enterprise Portal Administration

Published Mar 10, 2026 · Updated Mar 11, 2026 · Assigned by sap

Description

SAP NetWeaver Enterprise Portal Administration is vulnerable if a privileged user uploads untrusted or malicious content that, upon deserialization, could result in a high impact on the confidentiality, integrity, and availability of the host system.

Affected products

VendorProductAffectedFixed
SAP_SE SAP NetWeaver Enterprise Portal Administration EP-RUNTIME 7.50 —

Advisories 2

References