CVE-2026-27685

SAP NetWeaver Enterprise Portal Administration is vulnerable if a privileged user uploads untrusted or malicious content that, upon deserialization, could result in a high impact on the confidentiality, integrity, and availability of the host system.

Score

CVSS 3.1 9.1 Critical

Status

Awaiting Analysis - cna@sap.com

Published

2026-03-10

Last modified

2026-03-11

Weaknesses

CWE-502

Affected products

• Sap Netweaver Enterprise Portal Administration (Sap Se)

References

• https://me.sap.com/notes/3714585
• https://url.sap/sapsecuritypatchday