CVE-2026-44747

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server ABAP (affected versions not specified)

Description An authenticated attacker can exploit logical errors in memory management within the ABAP application server runtime to cause memory corruption. This issue is characterized as an out-of-bounds write flaw, where the system fails to handle memory or object lifecycles safely. By sending crafted requests through normal ABAP application interfaces, an attacker can trigger this faulty memory handling without requiring OS-level access. This can lead to unauthorized data access, modification of sensitive information, or system crashes resulting in unavailability, significantly impacting confidentiality, integrity, and availability.

Recommendations Apply the latest SAP security updates released in July 2026 for SAP NetWeaver Application Server ABAP.