CVE-2026-44756

CRITICAL 10 ALL-YEARS

Published 2026-09-08 · Last modified 2026-09-22 · sap · NVD: Awaiting Analysis

A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Under specific conditions, an unauthenticated attacker could exploit a crafted network request containing a malformed EPP header, potentially resulting in undefined behavior and abnormal program termination. Successful exploitation may have a high impact on the confidentiality, integrity, and availability of the application.

ELEVATED IMPACT

Severe if exploited (CVSS 10), but no confirmed exploitation. Patch on a normal cadence.

Exploitation likelihood

1.4%chance of exploitation in 30 days · 72nd percentile

○ In CISA KEV○ Catalogued PoC◆ SSVC: exploitation none, automatable yes

Impact if exploited

10CVSS 3.1 · CRITICAL · CNA

ConfidentialityHigh
IntegrityHigh
AvailabilityHigh

What an attacker needs

✓Access: Reachable over the network — no local access needed
✓Privileges: No account or privileges required
✓User interaction: No user interaction needed
✓Complexity: No special conditions — reliably repeatable

✓ lowers the bar for an attacker · ⚠ raises it

Proof of concept

No public PoC is currently catalogued.

Search for new PoCs

Search GitHub now — results may be empty or unverified.

Tracked sources are checked weekly for the full archive, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.

Affected

Vendors Sap Se

Products Sap Extended Passport (Epp) Processing

Weakness (CWE)

CWE-120: : Buffer Copy without Checking Size of Input

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References and research data (JSON)

All CVSS metrics

CRITICAL 10 v3.1 · CNA Primary
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CRITICAL 10 v3.1 · NVD Secondary
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References

Advisories

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-72572 ADVISORYEUVD · EUVD-2026-72572

Technical & other

https://me.sap.com/notes/3747649CVE record · sap · Updated 2026-09-08T00:10:16.283Z
NVD · CVE-2026-44756 · Updated 2026-09-22T21:17:30.593
https://url.sap/sapsecuritypatchdayCVE record · sap · Updated 2026-09-08T00:10:16.283Z
NVD · CVE-2026-44756 · Updated 2026-09-22T21:17:30.593
http://seclists.org/fulldisclosure/2026/Sep/65CVE record · CVE · Updated 2026-09-22T20:07:26.300Z
NVD · CVE-2026-44756 · Updated 2026-09-22T21:17:30.593

Sources: NVD · CVE.org · All sources and attribution · EPSS