CVE-2026-27685 — Insecure Deserialization in SAP NetWeaver Enterprise Portal Administration

CVE-2026-27685

Insecure Deserialization in SAP NetWeaver Enterprise Portal Administration PUBLISHED

Description (CNA)

SAP NetWeaver Enterprise Portal Administration is vulnerable if a privileged user uploads untrusted or malicious content that, upon deserialization, could result in a high impact on the confidentiality, integrity, and availability of the host system.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP NetWeaver Enterprise Portal Administration	affected EP-RUNTIME 7.50

CWE

CWE-502

References

https://me.sap.com/notes/3714585
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.