Security News Jul 14, 2026 by vuln.today Threat Intelligence

Critical Memory Corruption in SAP NetWeaver AS ABAP - CVE-2026-44747

Analysis

Detailed AI-generated intelligence summary covering attack vector, impact assessment, affected versions, remediation steps, and indicators of compromise.

POChttps://••••••••••.com/exploit

PATCHhttps://••••••••••.com/patch

ADVISORYhttps://••••••••••.com/advisory

Full article requires sign-in

Access weekly reports, audio discussions, threat analysis, and CVE breakdowns.

Related CVEs

CVE-2026-44747

Related Vulnerability Groups

SAP NetWeaver AS ABAP Memory Corruption and XSS CRITICAL

2 CVEs

Other CVEs in Same Group

CVE-2026-44760 MEDIUM 4.7

Reflected XSS in SAP NetWeaver Application Server ABAP's Business Server Pages (BSP) framework allows remote unauthenticated attackers to inject arbitrary JavaScript into HTTP responses when a victim user interacts with a crafted URL. Successful exploitation enables session token theft and execution of authenticated actions on behalf of the victim within the SAP web context. No public exploit code or CISA KEV listing is identified at time of analysis; CVSS AC:H indicates non-trivial conditions must align for successful delivery, moderating real-world risk despite the enterprise sensitivity of SAP environments.