EUVD-2026-55860
GHSA-7vqw-f9w6-hfj5
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Network-facing service requires no auth; auto-restart limits impact to low availability only, with no confidentiality or integrity effect.
Primary rating from Vendor (sap).
CVSS VectorVendor: sap
Lifecycle Timeline
1DescriptionCVE.org
SAP SAPSPrint Service has memory corruption vulnerabilities in the handling of certain commands. An unauthenticated attacker could send specially crafted requests that trigger a buffer overflow in the affected component. This causes a temporary service interruption and automatic restart, resulting in low impact on availability but no impact on confidentiality and integrity.
AnalysisAI
Stack-based buffer overflow in SAP SAPSPrint Service (CWE-121) allows unauthenticated remote attackers to crash the service via specially crafted command requests, triggering an automatic service restart. The impact is limited to low availability disruption with no confidentiality or integrity compromise. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | No authentication is required - the CVSS vector confirms PR:N (no privileges) and AV:N (network-accessible), meaning the service is reachable and exploitable without credentials. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 base score of 5.3 (Medium) reflects a network-accessible, unauthenticated, low-complexity attack surface, but the impact ceiling is low availability only - the service auto-restarts, meaning sustained unavailability would require repeated attack traffic. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the patch released by SAP through the SAP Security Patch Day cycle, documented in SAP Note 3725940 (https://me.sap.com/notes/3725940). … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-121 – Stack-based Buffer Overflow
View allSame technique Stack Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today