CVE-2026-58234 — Denial of Service vulnerability in SAP Process Integration (SOAP Adapter)

CVE-2026-58234

Denial of Service vulnerability in SAP Process Integration (SOAP Adapter) PUBLISHED

Description (CNA)

SAP Process Integration (SOAP Adapter) allows a privileged user to send specially crafted requests containing deeply nested entity definitions, which under certain conditions could temporarily increase processor load and degrade system responsiveness. Successful exploitation results in low impact on availability with no impact on confidentiality and integrity.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Process Integration (SOAP Adapter)	affected MESSAGING 7.50; affected SAP_XIAF 7.50

CWE

CWE-776

References

https://me.sap.com/notes/3736494
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.