What is the CVSS score of CVE-2026-27685?

CVE-2026-27685 has a CVSS 3.1 base score of 9.1 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of SAP are affected by CVE-2026-27685?

SAP NetWeaver Enterprise Portal Administration contains a critical vulnerability (CVSS 9.1) that allows privileged users to upload malicious content leading to complete system compromise.

How to fix or mitigate CVE-2026-27685?

Within 24 hours: Identify all SAP NetWeaver Portal instances in production and document current user privilege levels; restrict file upload functionality to essential personnel only and enable audit logging on all upload activities. Within 7 days: Implement network segmentation to limit Portal admin access to trusted networks only; conduct user access review to ensure principle of least privilege for administrative accounts. Within 30 days: Monitor vendor communications for patch availability; establish evaluation and testing plan for immediate deployment once patch releases; consider temporary migration of critical Portal functions to alternative systems if risk tolerance is exceeded.

SAP CVE-2026-27685

CRITICAL

Deserialization of Untrusted Data (CWE-502)

2026-03-10 cna@sap.com

SAP Deserialization

9.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

9.1 CRITICAL

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Mar 10, 2026 - 17:38 nvd

CRITICAL 9.1

DescriptionCVE.org

SAP NetWeaver Enterprise Portal Administration is vulnerable if a privileged user uploads untrusted or malicious content that, upon deserialization, could result in a high impact on the confidentiality, integrity, and availability of the host system.

AnalysisAI

SAP NetWeaver Enterprise Portal Administration has an insecure deserialization vulnerability allowing privileged users to execute code through uploaded files.