Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-44756

Memory Corruption vulnerability in SAP Extended Passport (EPP) Processing

CVSS 3.1 10.0 CRITICALCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-44756

Published

A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Under specific conditions, an unauthenticated attacker could exploit a crafted network request containing a malformed EPP header, potentially resulting in undefined behavior and abnormal program termination. Successful exploitation may have a high impact on the confidentiality, integrity, and availability of the application.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-44756

Published

SAP Extended Passport (EPP) Processing

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "SAP_SE",
                    "product": "SAP Extended Passport (EPP) Processing",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "KRNL64NUC 7.22"
                        },
                        {
                            "status": "affected",
                            "version": "7.22EXT"
                        },
                        {
                            "status": "affected",
                            "version": "KRNL64UC 7.22"
                        },
                        {
                            "status": "affected",
                            "version": "7.53"
                        },
                        {
                            "status": "affected",
                            "version": "8.04"
                        },
                        {
                            "status": "affected",
                            "version": "WEBDISP 9.16"
                        },
                        {
                            "status": "affected",
                            "version": "9.18"
                        },
                        {
                            "status": "affected",
                            "version": "9.19"
                        },
                        {
                            "status": "affected",
                            "version": "9.20"
                        },
                        {
                            "status": "affected",
                            "version": "KERNEL 7.22"
                        },
                        {
                            "status": "affected",
                            "version": "7.54"
                        },
                        {
                            "status": "affected",
                            "version": "7.77"
                        },
                        {
                            "status": "affected",
                            "version": "7.89"
                        },
                        {
                            "status": "affected",
                            "version": "7.93"
                        },
                        {
                            "status": "affected",
                            "version": "9.16"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON