What is CVE-2026-27675?

CVE-2026-27675 is a low-severity vulnerability in Sap Se Landscape Transformation, classified under Code Injection. CVSS score: 2.0/10. Published 2026-04-14.

How severe is CVE-2026-27675?

Low severity. CVSS v3 base score is 2.0 out of 10.

RCE in Sap Se Landscape Transformation

CVE-2026-27675

SAP Landscape Transformation contains a vulnerability in an RFC-exposed function module that could allow a high privileged adversary to inject arbitrary ABAP code and operating system commands. Due to this, some information could be modified, but the attacker does not have control over kind or degree. This leads to a low impact on integrity, while confidentiality and availability are not impacted.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.002 (6.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 2.0 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N.

Affected products

Sap_se Sap Landscape Transformation — versions DMIS 2011_1_700, 2011_1_710, 2011_1_730

Weakness classification (CWE)

CWE-94 — Code Injection

References

Frequently asked questions

What is CVE-2026-27675?: CVE-2026-27675 is a low-severity vulnerability in Sap Se Landscape Transformation, classified under Code Injection. CVSS score: 2.0/10. Published 2026-04-14.
How severe is CVE-2026-27675?: Low severity. CVSS v3 base score is 2.0 out of 10.