Skip to content
OpenAdvisories
Critical · 10.0 CVE-2026-44756 EUVD-2026-72572GHSA-77hj-jw22-hx3x

Memory Corruption vulnerability in SAP Extended Passport (EPP) Processing

Published Sep 8, 2026 · Updated Sep 22, 2026 · Assigned by sap

Description

A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Under specific conditions, an unauthenticated attacker could exploit a crafted network request containing a malformed EPP header, potentially resulting in undefined behavior and abnormal program termination. Successful exploitation may have a high impact on the confidentiality, integrity, and availability of the application.

Affected products

VendorProductAffectedFixed
SAP_SE SAP Extended Passport (EPP) Processing KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.53, 8.04, WEBDISP 9.16, 9.18, 9.19, 9.20, KERNEL 7.22, 7.54, 7.77, 7.89, 7.93, 9.16 —

Advisories 2

References