Buffer overflow in SAP NetWeaver AS ABAP - CVE-2026-27671
Published: June 9, 2026
Vulnerability identifier: #VU133998
CSH Severity: Critical
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-27671
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error. A remote attacker can send specially crafted traffic to the server, trigger memory corruption and execute arbitrary code on the target system.
Affected software
SAP NetWeaver AS ABAP
How to mitigate CVE-2026-27671
Install updates from vendor's website.