CVE-2026-44747

—

CVSS 3.1

9.9 critical

EPSS

<1%p45

Published

Jul 14, 2026 (Jul 14, 2026)

Modified

Jul 29, 2026

Description

SAP NetWeaver Application Server ABAP allows an authenticated attacker to leverage logical errors in memory management to cause a memory corruption that could lead to unauthorized data access, modification, or system unavailability. This has high impact on confidentiality, integrity, and availability of the application.

Weakness: CWE-787
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news3 stories

⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0

The Hacker NewsJul 21, 04:34 UTC · Jul 21, 2026Vulnerability in the wildCVE-2026-63030 CVE-2026-60137 CVE-2026-15409+26 CVEs

SAP Patches CVSS 9.9 NetWeaver ABAP Flaw That Could Expose or Modify Data

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2026Vulnerability in the wildCVE-2026-44747 CVE-2026-27690 CVE-2026-44761

Microsoft discloses ‘the mother of all’ vulnerability loads, tripling June’s previous record

CyberScoopJul 14, 20:05 UTC · Jul 14, 2026Vulnerability in the wildCVE-2026-56155 CVE-2026-56164 CVE-2026-44747+1 CVEs1