CVE-2026-58234

CVE-2026-58234 is a low-severity denial-of-service flaw in the SOAP Adapter of SAP Process Integration, caused by improper handling of recursive XML entity definitions (CWE-776). An attacker who already holds highly privileged credentials must send specially crafted SOAP requests containing deeply nested entity definitions, which under certain conditions can drive up processor load. The only impact is a temporary, low-severity degradation of system responsiveness; confidentiality and integrity are unaffected, so the attacker gains at most a brief availability impact rather than code execution or data access. Only organizations running SAP Process Integration with the SOAP Adapter enabled are affected, and only via a highly privileged account (legitimate or compromised). No public proof of concept is known, it is not in CISA's KEV catalog, and EPSS puts the 30-day exploitation probability at just 0.2%; the fix shipped in SAP's September 2026 security updates.

What to do: Apply the SAP Process Integration fix distributed in the September 2026 SAP Security Patch Day, checking the SAP security note for the exact patched versions rather than assuming current patch levels. Because exploitation requires highly privileged access, restrict and audit which accounts may call the SOAP Adapter and rotate or monitor privileged credentials. Monitor processor load and system responsiveness for anomalies as an interim detection measure.