CVE-2026-27690 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	9.1 CRITICAL	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: 41%

Common Weakness Enumeration

CWE-444 - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
The product acts as an intermediary HTTP agent (such as a proxy or firewall) in the data flow between two entities such as a client and server, but it does not interpret malformed HTTP requests or responses in ways that are consistent with how the messages will be processed by those entities that are at the ultimate destination.

Vulnerability Media Exposure

[GERMAN] SAP-Patchday: Teils kritische Sicherheitslücken in mehreren Produkten gefixt
Im Juli verarzten die Programmierer von SAP 16 teils kritische Sicherheitslücken in mehreren Produkten.
Published: 2026-07-14T08:55:00+00:00
[ENGLISH] Patchpocalypse Now: Microsoft tops last month's record with 622 Patch Tuesday CVEs
Remember when last month's 206 CVEs seemed eye-watering? Yeah, those were the days
Published: 2026-07-14T22:49:40+02:00
[GERMAN] SAP Patchday Juli: Kritische Memory-Corruption-Lücke in NetWeaver AS ABAP geschlossen
SAP hat im Rahmen seines monatlichen Patchdays eine schwerwiegende Memory-Corruption-Schwachstelle in NetWeaver AS ABAP geschlossen. Die Lücke wurde in Kooperation mit den Onapsis Research Labs identifiziert und behoben. Der Beitrag SAP Patchday Juli: Kritische Memory-Corruption-Lücke in NetWeaver AS ABAP geschlossen erschien zuerst auf All About Security Das Online-Magazin zu Cybersecurity (Cybersicherheit). Ransomware, Phishing, IT-Sicherheit, Netzwerksicherheit, KI, Threats, DDoS, Identity & Access, Plattformsicherheit .
Published: 2026-07-14T12:44:18+00:00
[ENGLISH] SAP Patches CVSS 9.9 NetWeaver ABAP Flaw That Could Expose or Modify Data
SAP has rolled out updates to address multiple vulnerabilities as part of its July 2026 security updates, including a critical flaw in SAP NetWeaver Application Server ABAP. The vulnerability in question is CVE-2026-44747 (CVSS score: 9.9), an out-of-bounds write flaw that allows an authenticated attacker to leverage logical errors in memory management to cause a memory corruption that could
Published: 2026-07-14T23:47:57+05:30
[ENGLISH] SAP warns of critical flaws in NetWeaver and Commerce Cloud
SAP has addressed 16 vulnerabilities across multiple products as part of its July 2026 security updates, including three critical flaws in NetWeaver, Commerce Cloud, and AppRouter. [...]
Published: 2026-07-14T07:42:21-04:00
[GERMAN] SAP Patch Day Juli 2026
Ein Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um Dateien zu manipulieren, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um einen SQL-Injection Angriff durchzuführen, um einen Cross-Site Scripting Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen, und um beliebigen Programmcode auszuführen.
Published: 2026-07-13T22:00:00+00:00

References

https://me.sap.com/notes/3720138

https://url.sap/sapsecuritypatchday