Riskcovery

CVE-2026-34265

Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform

State
Published
Severity
9.8 Critical
Published
Aug 11, 2026
Updated
Aug 12, 2026
Reserved
Mar 26, 2026

Read the record on cve.org

Description

SAP NetWeaver Application Server ABAP allows an unauthenticated attacker to exploit logical errors in DIAG protocol parsing, resulting in memory corruption. This vulnerability could potentially disclose sensitive system information or crash the system, leading to a high impact on the confidentiality, integrity, and availability of the application.

Scores

CVSSScoreVectorSource
3.19.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsap

Weaknesses

Affected Products

ProductVersions
SAP NetWeaver and ABAP PlatformSAP_SE
  • KRNL64NUC 7.22Affected
  • 7.22EXTAffected
  • KRNL64UC 7.22Affected
  • 7.22EXT2Affected
  • 7.22EXT3Affected
  • 7.53Affected
  • 7.54Affected
  • 7.77Affected
  • 7.89Affected
  • 7.93Affected
  • 8.04Affected
  • 9.16 9.18Affected
  • 9.19Affected
  • KERNEL 7.22Affected
  • 9.16Affected
  • 9.18Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.