עברית

Vulnerability Intelligence

CVE-2026-40130

Medium 5.3

Published
Last modified
NVD status
Awaiting Analysis

Description

SAP SAPSPrint Service has memory corruption vulnerabilities in the handling of certain commands. An unauthenticated attacker could send specially crafted requests that trigger a buffer overflow in the affected component. This causes a temporary service interruption and automatic restart, resulting in low impact on availability but no impact on confidentiality and integrity.

References2

Metrics

CVSS 3.1
5.3 MEDIUM Score source: CNA CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS — exploit probability
0% percentile: 41 · as of 12 November 2026
CWE
CWE-121

Could this be exploited in your environment?

A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.