CVE-2026-44756 — Memory Corruption vulnerability in SAP Extended Passport (EPP) Processing

Description (CNA)

A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Under specific conditions, an unauthenticated attacker could exploit a crafted network request containing a malformed EPP header, potentially resulting in undefined behavior and abnormal program termination. Successful exploitation may have a high impact on the confidentiality, integrity, and availability of the application.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Extended Passport (EPP) Processing	affected KRNL64NUC 7.22; affected 7.22EXT; affected KRNL64UC 7.22; affected 7.53; affected 8.04; affected WEBDISP 9.16; affected 9.18; affected 9.19; affected 9.20; affected KERNEL 7.22; affected 7.54; affected 7.77; affected 7.89; affected 7.93; affected 9.16

CWE

CWE-120

References

https://me.sap.com/notes/3747649
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

http://seclists.org/fulldisclosure/2026/Sep/65