EUVD-2026-72572
GHSA-77hj-jw22-hx3x
Severity by source
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Unauthenticated network reach (PR:N/UI:N); 'specific conditions' implies AC:H; confirmed impact is a crash (A:H) with only possible limited C/I from memory corruption, and no clear cross-system scope change.
Primary rating from Vendor (sap).
CVSS VectorVendor: sap
Lifecycle Timeline
2DescriptionCVE.org
A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Under specific conditions, an unauthenticated attacker could exploit a crafted network request containing a malformed EPP header, potentially resulting in undefined behavior and abnormal program termination. Successful exploitation may have a high impact on the confidentiality, integrity, and availability of the application.
AnalysisAI
Remote unauthenticated denial-of-service (and possible memory corruption) in SAP's Extended Passport (EPP) processing library allows an attacker to send a crafted network request with a malformed EPP header, triggering a buffer overflow (CWE-120) that leads to undefined behavior and abnormal program termination. Any SAP application relying on the vulnerable EPP processing component is affected; SAP rates it CVSS 10.0. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires network access to a SAP service that ingests and parses Extended Passport (EPP) headers, and the ability to send a crafted request carrying a malformed EPP header; no authentication or user interaction is needed per the CVSS vector (PR:N/UI:N). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor CVSS is a maximal 10.0 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H), which on paper signals a top-priority, wormable-class flaw. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the fix referenced in SAP Security Note 3747649 (https://me.sap.com/notes/3747649), released via the SAP Security Patch Day (https://url.sap/sapsecuritypatchday); the exact patched kernel/Support Package levels are listed in that note and were not provided in this dataset, so no specific fix version can be cited here - do not infer one. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all SAP systems in your infrastructure using the Extended Passport processing library and classify by business criticality. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-120 – Classic Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today