What is CVE-2026-34265?

CVE-2026-34265 is a critical-severity vulnerability in Sap_se Sap Netweaver And Abap Platform, classified under Out-of-bounds Write. CVSS score: 9.8/10. Published 2026-08-11.

How severe is CVE-2026-34265?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Buffer overflow in Sap_se Sap Netweaver And Abap Platform

CVE-2026-34265

SAP NetWeaver Application Server ABAP allows an unauthenticated attacker to exploit logical errors in DIAG protocol parsing, resulting in memory corruption. This vulnerability could potentially disclose sensitive system information or cras…

Vulnerability class: Buffer Overflow

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Sap_se Sap Netweaver And Abap Platform — versions KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22

Weakness classification (CWE)

CWE-787 — Out-of-bounds Write

References

cna@sap.com
cna@sap.com

Frequently asked questions

What is CVE-2026-34265?: CVE-2026-34265 is a critical-severity vulnerability in Sap_se Sap Netweaver And Abap Platform, classified under Out-of-bounds Write. CVSS score: 9.8/10. Published 2026-08-11.
How severe is CVE-2026-34265?: Critical severity. CVSS v3 base score is 9.8 out of 10.