CVE-2026-44747 Memory Corruption vulnerability in SAP NetWeaver Application Server ABAP
An authenticated attacker can exploit memory management errors in SAP NetWeaver ABAP to access or modify data and cause system unavailability.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-44747?
CVE-2026-44747 is a critical memory corruption vulnerability in SAP_SE SAP NetWeaver Application Server ABAP, published on 14 Jul 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
SAP NetWeaver Application Server ABAP allows an authenticated attacker to leverage logical errors in memory management to cause a memory corruption that could lead to unauthorized data access, modification, or system unavailability. This has high impact on confidentiality, integrity, and availability of the application.
Weakness: CWE-787
Which versions are affected by CVE-2026-44747?
How do I fix CVE-2026-44747?
No fix has been published for CVE-2026-44747 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2026-44747 being exploited?
There is no known exploitation of CVE-2026-44747 in the wild and no public exploit code.
Sources
Also known as GHSA-wpx3-vvrc-3w8m.