CVE-2026-27671

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server ABAP (affected versions not specified) SAP ABAP Platform (affected versions not specified)

Description Improper RFC (Remote Procedure Call) protocol validation in the SAP Kernel allows an unauthenticated attacker to send a crafted RFC request. This exploits logical errors in memory management, resulting in memory corruption. Such an exploit can lead to unauthenticated access, privilege escalation through missing authorization checks to gain administrative control, and high impact on the confidentiality, integrity, and availability of the application.

Recommendations Apply SAP Security Note 3717897. Review SAP Security Patch Day updates. Isolate affected systems immediately.