CVE-2026-40130: Memory Corruption vulnerability in SAPSPrint Service

Published Aug 11, 2026

Updated

SAP SAPSPrint Service has memory corruption vulnerabilities in the handling of certain commands. An unauthenticated attacker could send specially crafted requests that trigger a buffer overflow in the affected component. This causes a temporary service interruption and automatic restart, resulting in low impact on availability but no impact on confidentiality and integrity.

Affected Software

1 affected component

SAP SAPSPrint Service

Event History

Aug 11, 2026

CVE Published

via MITRE·12:11 AM

Data Sourced

via MITRE·12:11 AM

DescriptionSeverity

Data Sourced

via NVD·01:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-40130?

CVE-2026-40130 has a medium severity rating of 5.3.

How do I fix CVE-2026-40130?

To fix CVE-2026-40130, apply the latest patches provided by SAP for the SAPSPrint Service.

What type of vulnerability is CVE-2026-40130?

CVE-2026-40130 is a memory corruption vulnerability related to buffer overflow.

What could an attacker achieve by exploiting CVE-2026-40130?

An attacker could exploit CVE-2026-40130 to cause a temporary service interruption and an automatic restart of the SAPSPrint Service.

Is user authentication required to exploit CVE-2026-40130?

No, CVE-2026-40130 can be exploited by an unauthenticated attacker.