CVE-2026-58240

Vendor

SAP

Product

NetWeaver

CVSS

9.8

EPSS

0.005 (p45)

Exposure class

Web platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 44
   CERT-EU advisory CERT-EU 7d ago

   Critical Vulnerabilities in SAP Kernel and NetWeaver Message Server

   On 8 September 2026, as part of its September Security Patch Day, SAP released Security Notes addressing two critical vulnerabilities affecting a broad range of SAP products[3]. The most severe, CVE-2026-44756 (CVSS 10.0), is a…

   CVSS 10.0 CVE-2026-44756CVE-2026-58240 SAP
2. 35
   CVE NVD 8 Sep 2026

   SAP NetWeaver Message Server does not sufficiently validate the authenticity of internal application server components during registration.

   SAP NetWeaver Message Server does not sufficiently validate the authenticity of internal application server components during registration. An unauthenticated attacker with network access to the affected service could exploit…

   CVSS 9.8 CVE-2026-58240 SAP