CVE-2026-34265
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
SAP NetWeaver Application Server ABAP is vulnerable to logical errors in DIAG protocol parsing, allowing an unauthenticated attacker to cause memory corruption. This could potentially disclose sensitive system information or crash the system, leading to high impact on confidentiality, integrity, and availability.
Risk Assessment
An attacker can access sensitive data or cause system unavailability, disrupting application and services.
Recommendation
Apply security patches from SAP and monitor the system for unusual behavior.
Original NVD description (English source)
SAP NetWeaver Application Server ABAP allows an unauthenticated attacker to exploit logical errors in DIAG protocol parsing, resulting in memory corruption. This vulnerability could potentially disclose sensitive system information or crash the system, leading to a high impact on the confidentiality, integrity, and availability of the application.