CVE-2026-44756

CVSS 10.0 (critical) · published 2026-09-08

A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Under specific conditions, an unauthenticated attacker could exploit a crafted network request containing a malformed EPP header, potentially resulting in undefined behavior and abnormal program termination. Successful exploitation may have a high impact on the confidentiality, integrity, and availability of the application.

Weakness: CWE-120

Source: NVD CVE-2026-44756

References

• https://me.sap.com/notes/3747649
• https://url.sap/sapsecuritypatchday
• http://seclists.org/fulldisclosure/2026/Sep/65

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.