SAP Patches CVSS 9.9 NetWeaver ABAP Out-of-Bounds Write Flaw

Wed, 15 Jul 2026 12:11:39 +0000

Engineer — Plan: SAP NetWeaver ABAP is widely deployed in enterprise environments and this authenticated out-of-bounds write carries a 9.9 CVSS; no KEV listing, EPSS near zero, and no public PoC mean there’s no immediate exploitation pressure, but apply SAP’s July 2026 security patches in your next maintenance window.
SOC/IR — Skip
Leader — Skip
Signals: CVE-2026-44747 — CISA KEV: not listed, EPSS 0.00, no public PoC found

Enterprise-Erp on CuraSec