CVE-2026-27675: Code Injection vulnerability in SAP Landscape Transformation
SAP Landscape Transformation contains a vulnerability in an RFC-exposed function module that could allow a high privileged adversary to inject arbitrary ABAP code and operating system commands. Due to this, some information could be modified, but the attacker does not have control over kind or degree. This leads to a low impact on integrity, while confidentiality and availability are not impacted.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-27675?
CVE-2026-27675 is classified as a high severity vulnerability due to the potential for arbitrary code execution by a privileged adversary.
How do I fix CVE-2026-27675?
To fix CVE-2026-27675, apply the latest security patches provided by SAP for the SAP Landscape Transformation software.
What type of attack does CVE-2026-27675 enable?
CVE-2026-27675 enables a privileged adversary to perform code injection attacks, allowing them to execute arbitrary ABAP code and operating system commands.
Which software is affected by CVE-2026-27675?
CVE-2026-27675 affects SAP Landscape Transformation, specifically within its RFC-exposed function modules.
What should I do if my systems are vulnerable to CVE-2026-27675?
If your systems are vulnerable to CVE-2026-27675, it is critical to assess your environment for unauthorized access and apply necessary patches immediately.