CVE-2026-34265

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server ABAP (affected versions not specified)

Description An unauthenticated attacker can exploit logical errors in the parsing of the DIAG protocol, which is a proprietary SAP protocol used for communication between the application server and the SAP GUI. This flaw leads to memory corruption, potentially allowing the disclosure of sensitive system information or causing a system crash, impacting the confidentiality, integrity, and availability of the application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.