CVE-2026-44749: Information Disclosure vulnerability in SAP Gateway
Published May 26, 2026
·Updated
The SAP Gateway allows attackers to inject content into error messages, potentially leading to disclosure of request artefacts (e.g., regex patterns) and revealing underlying URI parsing logic. Leading to low impact on confidentiality. Integrity and availability are unaffected.
Affected Software
1 affected component
SAP SAP Gateway
Event History
May 26, 2026
CVE Published
via MITRE·05:24 PM
Data Sourced
via MITRE·05:24 PM
DescriptionSeverity
Data Sourced
via NVD·06:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-44749?
CVE-2026-44749 has a medium severity rating of 4.3.
2
How do I fix CVE-2026-44749?
The recommended fix for CVE-2026-44749 is to apply the latest security patch provided by SAP for the SAP Gateway.
3
What type of vulnerability is CVE-2026-44749?
CVE-2026-44749 is an Information Disclosure vulnerability.
4
What can be disclosed due to CVE-2026-44749?
CVE-2026-44749 can potentially lead to the disclosure of request artifacts such as regex patterns.
5
Does CVE-2026-44749 affect the integrity and availability of the system?
CVE-2026-44749 does not affect the integrity or availability of the system.