What is CVE-2026-58234?

CVE-2026-58234 is a low-severity vulnerability in SAP Se Process Integration (Soap Adapter), classified under Improper Restriction of Recursive Entity References in DTDs (XML Entity Expansion). CVSS score: 2.2/10. Published 2026-09-08.

How severe is CVE-2026-58234?

Low severity. CVSS v3 base score is 2.2 out of 10.

XXE in SAP Se Process Integration (Soap Adapter)

CVE-2026-58234

SAP Process Integration (SOAP Adapter) allows a privileged user to send specially crafted requests containing deeply nested entity definitions, which under certain conditions could temporarily increase processor load and degrade system responsiveness. Successful exploitation results in low impact on availability with no impact on confidentiality and integrity.

CVSS v3 metric

CVSS v3 base score 2.2 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L.

Affected products

Sap_se Sap Process Integration (Soap Adapter) — versions MESSAGING 7.50, SAP_XIAF 7.50

Weakness classification (CWE)

CWE-776 — Improper Restriction of Recursive Entity References in DTDs (XML Entity Expansion)

References

Frequently asked questions

What is CVE-2026-58234?: CVE-2026-58234 is a low-severity vulnerability in SAP Se Process Integration (Soap Adapter), classified under Improper Restriction of Recursive Entity References in DTDs (XML Entity Expansion). CVSS score: 2.2/10. Published 2026-09-08.
How severe is CVE-2026-58234?: Low severity. CVSS v3 base score is 2.2 out of 10.