CVE-2026-44756: Memory Corruption vulnerability in SAP Extended Passport (EPP) Processing
A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Under specific conditions, an unauthenticated attacker could exploit a crafted network request containing a malformed EPP header, potentially resulting in undefined behavior and abnormal program termination. Successful exploitation may have a high impact on the confidentiality, integrity, and availability of the application.
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
An unauthenticated attacker can potentially exploit it remotely by sending a crafted network request. No user interaction or prior privileges are indicated.
What is required for exploitation?
The attacker needs to send a network request containing a malformed Extended Passport Protocol header under the specific conditions required to trigger the memory safety flaw. The available information does not identify those conditions further.
What could successful exploitation cause?
Successful exploitation could produce undefined behavior or abnormal program termination. It may also have high impact on the confidentiality, integrity, and availability of the affected application.