- Description
- A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Under specific conditions, an unauthenticated attacker could exploit a crafted network request containing a malformed EPP header, potentially resulting in undefined behavior and abnormal program termination. Successful exploitation may have a high impact on the confidentiality, integrity, and availability of the application.
- Source
- cna@sap.com
- NVD status
- Awaiting Analysis
CVSS 3.1
- Type
- Secondary
- Base score
- 10
- Impact score
- 6
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
- Severity
- CRITICAL
- cna@sap.com
- CWE-120
- Hype score
- Not currently trending
CVE-2026-44756: CVSS 10 pre-auth RCE in SAP kernel (ICM, Web Dispatcher, disp+work). Four protocol paths, no creds. Patch shipped Sep 8. If your CMDB can't name every unpatched SAP box by Friday, that's the finding. #Cybersecurity https://t.co/eiVn2RZwqW https://t.co/eYdRK6FifV
@johnmcclure00
4 Oct 2026
40 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Released @OWASP CBAS' pysap v0.2.1! EPP (Extended Passport) support, Message Server monitoring and packet handling, improved SAP Router fingerprinting, ++ Packets for both CVE-2026-58240 and CVE-2026-44756 now supported also! https://t.co/2fvnlJAqtv and on PyPi 😊
@MartinGalloAr
21 Sept 2026
105 Impressions
0 Retweets
3 Likes
0 Bookmarks
0 Replies
0 Quotes
【技術解説】CVSS 10.0が連鎖する9月、共通点は「認証の前提が崩れる」こと 今月はSAP EPP(CVE-2026-44756)、Adobe
@iss_kk_official
12 Sept 2026
59 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 ALERTĂ - Vulnerabilități critice identificate la nivelul unor produse SAP 🔐 Printre vulnerabilitățile remediate se numără CVE-2026-44756, CVE-2026-58240, CVE-2026-76969 și CVE-2026-66768, toate clasificate drept vulnerabilități critice. 👉 https://t.co/Lq1pp
@DNSC_RO
11 Sept 2026
156 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🔒 #CyberSecurity CVE-2026-44756: SAP Kernel CVSS 10.0 Unauthenticated RCE — Detection and Remedi… "SAP's September 2026 Security Patch Day delivered what every enterprise defender dreads: a…" 🔗 https://t.co/kxluyDvDkv #CyberSecurity #ThreatIntel #critical #zeroday
@SecurityAr58409
9 Sept 2026
30 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
News: SAP Patch Day: OVERPASS CVE-2026-44756 max-severity kernel EPP overflow lets unprivileged actors get admin on SAP via ICM. Onapsis: 10k+ internet-facing. Also S4GET CVE-2026-58240 unauth Message Server RCE. Patch Sep notes now. https://t.co/l1a1JEeOEJ
@snakeyesV1
8 Sept 2026
97 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🛡️ #ExploitGrid Daily Threat Digest Top #Vulnerabilities (#CVEs) of the day CVE-2026-44756 CVE-2026-75650 CVE-2026-86296 CVE-2026-18922 CVE-2026-58240 ..🧵👇
@exploitgrid
8 Sept 2026
74 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes
SAP scores a described crash 10.0 and a described takeover 9.8, and the whole gap is one scope metric. September patch day: CVE-2026-44756 and CVE-2026-58240. No exploitation reported. https://t.co/5vpeh6itnD
@severitydaily
8 Sept 2026
54 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
SAPは9月のセキュリティ更新で19件の新規Security Noteを公開し、4件のCritical脆弱性を含む計19件の問題を修正した。最重要はExtended Passport処理のメモリ破損脆弱性CVE-2026-44756である。 ほかのCriticalは、NetWeaver Message
@yousukezan
8 Sept 2026
1055 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 CRITICAL: CVE-2026-44756 (CVSS 10.0) is a critical memory corruption vulnerability in SAP Extended Passport (EPP) Processing. The flaw can be exploited remotely by an unauthenticated attacker through a crafted network request containing a malformed EPP header, potentially
@ThreatWire_
8 Sept 2026
122 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
CVE-2026-44756, a CVSS 10.0 SAP Extended Passport memory corruption vulnerability, lets unauthenticated attackers crash SAP systems. Patch now. #SAP #CVE202644756 #MemoryCorruption #Cybersecurity #PatchTuesday #Vulnerability #InfoSec https://t.co/g0l7ZCnCB4 https://t.co/ua6UQmB4
@Daily_CyberSec
8 Sept 2026
185 Impressions
0 Retweets
0 Likes
1 Bookmark
0 Replies
0 Quotes
CVE-2026-44756 A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Under specific conditions, an unauthenticated attacker could exploit … https://t.co/r4ra45sfS0
@CVEnew
8 Sept 2026
567 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes