What is the CVSS score of EUVD-2026-55860?

EUVD-2026-55860 has a CVSS 3.1 base score of 5.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L. EPSS exploitation probability: 0.4%.

SAP SAPSPrint Service EUVD-2026-55860

| CVE-2026-40130 MEDIUM

Stack-based Buffer Overflow (CWE-121)

2026-08-11 sap

GHSA-7vqw-f9w6-hfj5

Buffer Overflow Stack Overflow SAP Sapsprint Service Sap Se

5.3

CVSS 3.1 · Vendor: sap

Severity by source

Vendor (sap) PRIMARY

5.3 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

vuln.today AI

5.3 MEDIUM

Network-facing service requires no auth; auto-restart limits impact to low availability only, with no confidentiality or integrity effect.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (sap).

CVSS VectorVendor: sap

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

Low

Lifecycle Timeline

Analysis Generated

Aug 11, 2026 - 01:01 vuln.today

DescriptionCVE.org

SAP SAPSPrint Service has memory corruption vulnerabilities in the handling of certain commands. An unauthenticated attacker could send specially crafted requests that trigger a buffer overflow in the affected component. This causes a temporary service interruption and automatic restart, resulting in low impact on availability but no impact on confidentiality and integrity.

AnalysisAI

Stack-based buffer overflow in SAP SAPSPrint Service (CWE-121) allows unauthenticated remote attackers to crash the service via specially crafted command requests, triggering an automatic service restart. The impact is limited to low availability disruption with no confidentiality or integrity compromise. No public exploit code or active exploitation has been identified at time of analysis, and SAP has addressed this vulnerability via their Security Patch Day cycle.

Technical ContextAI

SAP SAPSPrint is a print spooler service component within the SAP ecosystem, responsible for handling print commands and job management. The vulnerability (CWE-121, Stack-based Buffer Overflow) arises in the service's command parsing logic, where insufficient boundary checking on attacker-controlled input allows a stack memory overwrite. The CPE string cpe:2.3:a:sap_se:sapsprint_service:*:*:*:*:*:*:*:* indicates all known versions of the service are affected with no version range restriction specified. Stack-based overflows in network-facing services can in theory enable code execution, but the observed impact here is limited to a controlled crash and automatic restart, suggesting either mitigating exploit mitigations (e.g., stack canaries, ASLR, DEP) or a non-exploitable crash path.

RemediationAI

Apply the patch released by SAP through the SAP Security Patch Day cycle, documented in SAP Note 3725940 (https://me.sap.com/notes/3725940). The exact fixed version number is not specified in the available intelligence; customers should consult the SAP Note directly for version-specific guidance. As a compensating control prior to patching, network-level access restrictions to the SAPSPrint service port can reduce exposure - restricting inbound connections to known print clients and internal network segments limits the attack surface without requiring service downtime. Firewall rules or SAP router configuration can enforce this. Note that these controls do not eliminate the vulnerability but reduce the population of potential attackers. Patch availability is confirmed per vendor advisory but the exact fixed release version has not been independently verified from available data.