CVE-2026-44747Patch

MEDIUMCVSS 9.9 · CRITICAL

Exploitation observed; activity peaked at 12 mentions and remains active

Immediate actions

Patch affected systems immediately
Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

SAP NetWeaver Application Server ABAP allows an authenticated attacker to leverage logical errors in memory management to cause a memory corruption that could lead to unauthorized data access, modification, or system unavailability. This has high impact on confidentiality, integrity, and availability of the application.

Back to dashboard

4.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-787

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

DECLINING

Threat summary

Active exploitation appears in 1 classified signals
Patch or workaround signal is available
27 mentions across 5 observed days
Momentum state: declining

What's happening

Active exploitation reported across 1 signal
Patch or workaround mentioned in 20 signals
Technical details provided in 25 signals
Disclosure: 3 classified signals
General: 2 classified signals
Peaked 4d ago at 12 mentions (2026-07-14); latest day: 1
27 total mentions across 5 days

Deep dive

Activity timeline27 mentions / 5d

Signal classification4 categories

Patch

2177.8%

Disclosure

311.1%

General

27.4%

Active Exploitation

13.7%

Referenced assets17 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-14	12	Active Exploitation1Disclosure1General1Patch9
2026-07-15	12	Disclosure1Patch11
2026-07-16	1	Patch1
2026-07-22	1	Disclosure1
2026-08-09	1	General1

Full discourse20 posts

Netlas.io@Netlas_io91d
Disclosure
CVE-2026-44747: Memory corruption in SAP NetWeaver AS ABAP, 9.9 rating 🔥 New vulnerability in SAP NetWeaver AS ABAP allows an authenticated attacker to abuse logical errors in memory management. This could lead to unauthorized data access, data modification, or system downtime. 👉 https://nt.ls/4m05i
Post summary
A new memory‑corruption vulnerability (CVE-2026-44747) in SAP NetWeaver AS ABAP allows an authenticated attacker to abuse logical errors, potentially leading to unauthorized data access, modification, or downtime.
040732.0K
7.7K followersView on X
SOCRadar®@socradar91d
Patch
A CVSS 9.9 in SAP NetWeaver? Say goodbye to a quiet week. 🚨 SAP’s July 2026 Patch Day is live. The headliner is CVE-2026-44747—a critical memory corruption flaw in AS ABAP. High-priority fixes for Approuter & Commerce Cloud are also in the mix. Patch now to mitigate the risk and strengthen your posture. 🔍 Read the breakdown: https://hubs.la/Q04pv29L0 #CyberSecurity #SAP #VulnerabilityManagement #InfoSec
Post summary
SAP’s July 2026 Patch Day highlights a critical memory‑corruption flaw (CVE‑2026‑44747) and urges immediate application of the released patches for AP/Commerce Cloud and other affected components.
11052775
7.1K followersView on X
Modat@modat_magnify90d
Patch
⚠️SAP NetWeaver AS ABAP – Out-of-Bounds Write / Memory Corruption (CVSS 9.9) SAP has patched CVE-2026-44747, a critical out-of-bounds write flaw in SAP NetWeaver Application Server ABAP, as part of its July 2026 Security Patch Day. An authenticated attacker can leverage logical errors in memory management to trigger memory corruption, potentially leading to unauthorised data access, data modification, or system unavailability. It was fixed alongside two other critical flaws: CVE-2026-27690 (CVSS 9.1), an HTTP request/response smuggling issue in SAP Approuter, and CVE-2026-44761 (CVSS 9.1), a default-credentials flaw in SAP Commerce Cloud. Mitigation: Install the patched ABAP Kernel version per SAP's July 2026 notes. As a temporary workaround, SAP proposes disabling all ICF nodes with a specific property in the SICF transaction, though this also disables SAP GUI for HTML and is not viable for all customers. There is no evidence of exploitation in the wild yet. Modat Magnify Query: product="SAP NetWeaver" The platform: https://magnify.modat.io/ Reference: https://support.sap.com/en/my-support/knowledge-base/security-notes-news/july-2026.html #Modat #ModatMagnify #threatintel #vulnerability #CVE202644747 #SAP #NetWeaver #ABAP #infosec #Critical
Post summary
SAP released a patch for CVE-2026-44747, outlining mitigation steps and a temporary workaround, while noting no evidence of wild exploitation.
02040565
1.8K followersView on X
にゃん☆たく/takumi.a@taku888infinity90d
Patch
今日のパッチチューズデー（MS一旦割愛） ◆Ivanti（クリティカルなし） CVE-2026-14903　Xtractionのパストラバーサルで任意ファイル読取 https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Xtraction-CVE-2026-14902-CVE-2026-14903?l… ◆Fortinet（クリティカルなし） CVE-2025-53379　FortiAuthenticator GUIの境界外読取り CVE-2026-59835　FortiSandboxのVNC無認証アクセス https://www.fortiguard.com/psirt?filter=1&version=&severity=5&severity=4&severity=3&severity=2 ◆SAP CVE-2026-44747　NetWeaver ABAPのメモリ破損で任意コード実行恐れ CVE-2026-27690　SAP ApprouterのHTTPリクエストスマグリング CVE-2026-44761　Commerce Cloudのサンプル認証情報が残存 CVE-2026-40128　NetWeaver Javaのディレクトリトラバーサル https://support.sap.com/en/my-support/knowledge-base/security-notes-news/july-2026.html ◆Adobe（今日多すぎ） Adobe ColdFusion（APSB26-82） CVE-2026-48318：パストラバーサルによる任意コード実行 CVE-2026-48322：コードインジェクションによる任意コード実行 CVE-2026-48284：入力検証不備による任意コード実行 CVE-2026-48321：認可不備による権限昇格 CVE-2026-48325：認証不備による任意コード実行 CVE-2026-48319：パストラバーサルによる任意コード実行 CVE-2026-48324：SQLインジェクションによる任意コード実行 CVE-2026-48327：認可不備による任意コード実行 CVE-2026-48320：反射型XSSによる権限昇格 CVE-2026-48328：入力検証不備による保護機能回避 CVE-2026-48332：SSRFによる保護機能回避 CVE-2026-48338：パストラバーサルによる任意ファイル読取 Adobe Commerce（APSB26-73） CVE-2026-48356：危険ファイルアップロードによる権限昇格 CVE-2026-48358：出力処理不備による任意コード実行 CVE-2026-47994：格納型XSSによる権限昇格 CVE-2026-47988：認可不備による保護機能回避 CVE-2026-47984：認可不備による保護機能回避 CVE-2026-47995：B2B機能の格納型XSSによる権限昇格 CVE-2026-47996：認可不備による保護機能回避 CVE-2026-47992：入力検証不備による権限昇格 Adobe Experience Manager（APSB26-74） CVE-2026-48259：SSRFによる任意コード実行 CVE-2026-48359：XXEによる任意コード実行 CVE-2026-48252：認証不備による保護機能回避 CVE-2026-48310：パストラバーサルによる任意読取 https://helpx.adobe.com/security.html
Post summary
The post lists multiple recent CVEs with their technical categories and provides links to vendor advisories, emphasizing the need for patching.
000421.6K
11.8K followersView on X
CompunetGroup@CompunetChile89d
Patch
🚨 #AlertaDeCiberseguridad | SAP corrigió 16 vulnerabilidades en su #SecurityPatchDay de julio. Destaca la CVE-2026-44747 (CVSS 9.9), que afecta a #SAP NetWeaver ABAP. Si utilizas esta plataforma, prioriza la actualización y monitorea tus sistemas. #CyberSecurity #CompuNet https://t.co/rBEu5vNXn4
Post summary
SAP’s July Security Patch Day addressed CVE‑2026‑44747, a CVSS 9.9 vulnerability affecting SAP NetWeaver ABAP, and urged users to apply the released patch promptly.
0211092
55 followersView on X
Aikido Community Japan@AikidoCommJP90d
Patch
2026年7月のSAP Patch Day。見出しはCVSS 9.9のNetWeaver脆弱性（CVE-2026-44747）に集中した。だが実務者が見るべきは、もう一つの方だ。 SAP Commerce CloudのCVE-2026-44761（CVSS 9.1）。原因は、認証情報の窃取でも、利用者が決めた安易なパスワードでもない。 SAP Help Portalが公式に提供していた、サンプル設定スクリプトだった。このスクリプトは、誰でも知り得るクレデンシャルを持つOAuthクライアントを作る。そして旧版のドキュメントには、「本番に持ち込むな」という警告がなかった。結果、サンプルのまま本番導入した環境では、未認証の攻撃者がトークンを取得し、API経由でデータを読み書きできる。システムは止まらない。データだけが、静かに読まれ、静かに書き換えられる。成立条件は3つの重なりだった。 ① 警告のないサンプルスクリプト ② 周知クレデンシャルという設計 ③ シークレット未変更のまま本番投入どれか1つ欠ければ、発火しなかった。ドキュメント自体が攻撃されるわけではない。安全でない設定が、公式ドキュメントを通じて多数の顧客環境へ複製される。それが共通の攻撃面になる。ドキュメントはSBOMにも、脆弱性スキャンにも載らない。だが、顧客環境を同じパターンで規定する。事実上のサプライチェーン構成要素だ。これはSAPだけの話ではない。 AWS、Azure、GitHub、Kubernetes、Terraform。私たちは毎日、「公式ドキュメント」を信頼して構築している。コードだけでなく、導入手順そのものをレビュー対象にする時代が来ている。やることは明快だ。本番環境に、サンプル由来のOAuthクライアント、APIキー、デモユーザー、テスト用証明書が残っていないか棚卸しする。あれば削除する。 #SAPSecurity #脆弱性 #サプライチェーン #サイバーセキュリティ
Post summary
The post details SAP Commerce Cloud CVE‑2026‑44761 caused by a sample OAuth client script with default credentials and advises removing such default configurations as a mitigative patch.
010201.3K
846 followersView on X
CERT-PY@CERTpy82d
Disclosure
⚠️ Vulnerabilidades en productos SAP ❗ CVE-2026-44761 ❗ CVE-2026-44747 ❗ CVE-2026-27690 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-sap-8/ https://t.co/6Fnqu3t1hg
Post summary
A short alert lists three SAP product CVEs and points to external links for more information, but contains no details on exploitation, patches, or technical specifics.
01001272
6.7K followersView on X
Xavier Rivera@XavierRiveraX91d
Patch
SAP patches 16 vulnerabilities in its July 2026 security update, three critical. NetWeaver AS ABAP gets fixed for a memory corruption bug (CVE-2026-44747) that risks unauthorized data access or system outages. SAP Commerce Cloud shipped with default credentials (CVE-2026-44761), letting attackers pull valid access tokens. No known exploitation yet. SAP runs 99 of the top 100 companies worldwide.
Post summary
SAP released a July 2026 security update patching 16 vulnerabilities, including CVE‑2026‑44747 (memory corruption) and CVE‑2026‑44761 (default credentials), with no known exploitation reported.
01010126
602 followersView on X
Orizon@OrizonCyber91d
Patch
🚨 CVE-2026-44747 — CVSS 9.9/10 ██████████ SAP NetWeaver Application Server ABAP allows an authenticated attacker to leverage logical errors in memory management... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/dmigu9DfUM
Post summary
A critical vulnerability (CVE-2026-44747) in SAP NetWeaver Application Server ABAP allows authenticated attackers to exploit memory management logic errors; a patch has been released.
10001105
66 followersView on X
CyberTLDR@CyberTLDR90d
Disclosure
2/3: CVE-2026-44747 is an out-of-bounds write. Logical errors in ABAP memory management let an attacker trigger corruption for unauthorized data access or downtime. A CVSS 9.1 HTTP request smuggling bug, CVE-2026-27690, hits SAP Approuter too. #CyberSecurity #CVE #InfoSec
Post summary
The tweet announces two high‑severity CVEs, providing technical details such as out‑of‑bounds writes and HTTP request smuggling, but offers no exploits, patches, or evidence of active exploitation.
1000046
26 followersView on X
CyberTLDR@CyberTLDR90d
Patch
1/3: SAP's July 2026 updates fix a critical CVSS 9.9 flaw in NetWeaver Application Server ABAP. CVE-2026-44747 lets an authenticated attacker corrupt memory to read, alter, or crash business data. Two more criticals were also patched. #CyberSecurity #CVE #InfoSec #DataBreach
Post summary
The tweet announces SAP's July 2026 patch that fixes the high‑severity CVE‑2026‑44747 flaw, a memory corruption vulnerability in NetWeaver Application Server ABAP.
1000039
26 followersView on X
GovCERT.CZ@GOVCERT_CZ90d
Patch
🚨Upozorňujeme na zranitelnost v SAP NetWeaver Application Server ABAP, CVE-2026-44747. Tato zranitelnost typu out-of-bounds write umožňuje autentizovanému útočníkovi zneužít logické chyby ve správě paměti a způsobit její poškození, což může vést k neoprávněnému přístupu k datům, jejich modifikaci nebo k nedostupnosti systému. Zneužití vyžaduje platnou autentizaci, přičemž chyba vzniká při nesprávném zpracování paměťových operací v ABAP jádře. Jako dočasné řešení lze deaktivovat všechny ICF uzly se specifickou vlastností v transakci SICF, což však omezuje funkčnost SAP GUI for HTML a není vhodné pro všechny prostředí. 📌Doporučujeme aktualizovat na nejnovější verzi.
Post summary
The post discloses CVE‑2026‑44747, describing an authenticated out‑of‑bounds write in SAP NetWeaver and recommends applying a temporary workaround via ICF nodes and updating to the latest version.
00010444
4.2K followersView on X
Clone Systems@CloneSystemsInc90d
Patch
Vulnerability Alert: Critical SAP NetWeaver Flaw SAP has released security updates addressing CVE-2026-44747, a critical vulnerability affecting SAP NetWeaver Application Server ABAP. The flaw carries a CVSS score of 9.9 and could allow an authenticated attacker to trigger memory corruption, potentially leading to unauthorized data access, data modification, or system disruption. SAP also patched two additional critical vulnerabilities affecting SAP Approuter and SAP Commerce Cloud. Organizations should: • Apply the latest SAP security updates • Prioritize affected NetWeaver ABAP environments • Review SAP Commerce Cloud for exposed sample OAuth credentials • Validate configurations and access controls No active exploitation has been reported, but the severity warrants immediate attention. Patch. Validate. Monitor. #Cybersecurity #VulnerabilityAlert #SAP #SAPNetWeaver #CVE202644747 #EnterpriseSecurity #PatchManagement #VulnerabilityManagement #CloneSystems
Post summary
SAP has released critical patches for CVE-2026-44747, a memory corruption flaw in NetWeaver ABAP, with no reported active exploitation. The advisory urges rapid update and configuration checks.
0001081
256 followersView on X
Daily CyberSecurity@Daily_CyberSec91d
Patch
SAP Security Patch Day July 2026 fixes CVE-2026-44747 (CVSS 9.9), a memory corruption flaw in NetWeaver AS ABAP, plus two more critical bugs. #SAP #CVE202644747 #MemoryCorruption #NetWeaver #CyberSecurity http://securityonline.info/sap-patch-day-july-2026/
Post summary
SAP released a patch for CVE-2026-44747, a memory corruption vulnerability with CVSS 9.9, and addressed two additional critical bugs.
01000346
12.5K followersView on X
IntegSec@integ_sec65d
General
CVE-2026-44747: SAP NetWeaver Application Server ABAP Memory Corruption Bug - What It Means for Your Business and How to Respond https://hubs.li/Q04slzCl0
Post summary
The excerpt announces a SAP NetWeaver memory corruption CVE and links to a response guide, but provides no PoC, exploit, active exploitation claim, or patch details.
0000037
32 followersView on X
セキュリティ対策Lab@securityLab_jp89d
Patch
SAP、2026年7月のセキュリティパッチデーでCVSS 9.9のNetWeaver重大脆弱性を含む16件を修正(CVE-2026-44747, CVE-2026-27690) https://rocket-boys.co.jp/security-measures-lab/sap-security-patch-day-july-2026-cve-2026-44747/ #セキュリティ対策Lab #security #securitynews
Post summary
The post announces SAP’s July 2026 Security Patch Day, noting the remediation of a critical NetWeaver vulnerability (CVE-2026-44747) with a CVSS score of 9.9 and other related issues.
00000161
483 followersView on X
Meridian Group@MeridianEU90d
Patch
#SAP July 2026 Patch Day: CVE-2026-44747 (CVSS 9.9) in NetWeaver AS ABAP allows authenticated attackers to corrupt memory, enabling data access, modification, or service disruption. Also patched: SAP Approuter and Commerce Cloud. No active exploitation reported. https://t.co/4Yeeh9I892
Post summary
The post reports that SAP has patched CVE-2026-44747 with a patch for NetWeaver AS ABAP, Approuter, and Commerce Cloud, and notes that there is no active exploitation reported.
0000070
67 followersView on X
كاسبر سكاي@KasperskyDev90d
Patch
ثغرة تلف ذاكرة حرجة في SAP NetWeaver AS ABAP تتيح للمهاجم تعديل البيانات أو تعطيل الأنظمة عن بُعد. المعرّف : CVE-2026-44747 الخطورة : 9.9 (CVSS) - Critical الإصدارات المتأثرة : Kernel 7.22 - 9.20 الحل : SAP Security Note 3747367 #CVE #SAP #CyberSecurity #CVE202644747
Post summary
The announcement provides detailed vulnerability information and explicitly references the corrective SAP Security Note 3747367, making it a patch-focused disclosure.
00000133
39.9K followersView on X
Upwind Security MDR@UpwindMDR90d
Patch
🚨 CRITICAL - SAP NetWeaver AS ABAP memory corruption via memory management logic flaw (CVE-2026-44747) SAP NetWeaver Application Server ABAP is affected by a memory management logic error in its ABAP application server runtime that can corrupt memory during processing. The root cause is a memory management logic flaw leading to memory corruption (unsafe handling of memory/object lifecycle). An attacker with valid authentication can exploit this by sending crafted requests/inputs through normal ABAP application interfaces, triggering the faulty memory handling without needing OS-level access. Successful exploitation can result in unauthorized data access or modification and can also crash the service, causing system unavailability with high impact to confidentiality, integrity, and availability. 👉 Affected: SAP NetWeaver Application Server ABAP | Upgrade to vendor-provided fixed version in the latest SAP Security Note for CVE-2026-44747
Post summary
The post announces a critical memory corruption vulnerability in SAP NetWeaver AS ABAP and directs users to upgrade via the latest SAP Security Note, providing technical details of the flaw while noting where to obtain a patch.
00000146
253 followersView on X
TECHEPAGES@techepages90d
Patch
🚨 SAP patches a critical CVSS 9.9 flaw in NetWeaver ABAP that could expose or modify data — plus two more 9.1 criticals 🔹 CVE-2026-44747: out-of-bounds write in NetWeaver ABAP enabling data theft, tampering, or downtime 🔹 CVE-2026-27690: HTTP request smuggling in SAP Approuter exposes user responses & triggers DoS 🔹 CVE-2026-44761: default OAuth credentials in Commerce Cloud let attackers read & modify data 🔹 No in-the-wild exploitation yet — but patch now and audit for the sample OAuth client
Post summary
SAP has released patches for three critical CVEs affecting NetWeaver ABAP and related components; the post highlights the technical nature of the flaws and confirms no in‑the‑wild exploitation yet, urging organizations to apply the fixes and audit OAuth credentials.
0000059
23 followersView on X

Explore more

Back to dashboard

What researchers are saying

CVE-2026-44747

Netlas.io[verified]@Netlas_ioDisclosure

A new memory‑corruption vulnerability (CVE-2026-44747) in SAP NetWeaver AS ABAP allows an authenticated attacker to abuse logical errors, potentially leading to unauthorized data access, modification, or downtime.

SOCRadar®[verified]@socradarPatch

SAP’s July 2026 Patch Day highlights a critical memory‑corruption flaw (CVE‑2026‑44747) and urges immediate application of the released patches for AP/Commerce Cloud and other affected components.

Modat[verified]@modat_magnifyPatch

SAP released a patch for CVE-2026-44747, outlining mitigation steps and a temporary workaround, while noting no evidence of wild exploitation.

にゃん☆たく/takumi.a[verified]@taku888infinityPatch

The post lists multiple recent CVEs with their technical categories and provides links to vendor advisories, emphasizing the need for patching.

Aikido Community Japan[verified]@AikidoCommJPPatch

The post details SAP Commerce Cloud CVE‑2026‑44761 caused by a sample OAuth client script with default credentials and advises removing such default configurations as a mitigative patch.

Xavier Rivera[verified]@XavierRiveraXPatch

SAP released a July 2026 security update patching 16 vulnerabilities, including CVE‑2026‑44747 (memory corruption) and CVE‑2026‑44761 (default credentials), with no known exploitation reported.

Orizon[verified]@OrizonCyberPatch

A critical vulnerability (CVE-2026-44747) in SAP NetWeaver Application Server ABAP allows authenticated attackers to exploit memory management logic errors; a patch has been released.

GovCERT.CZ[verified]@GOVCERT_CZPatch

The post discloses CVE‑2026‑44747, describing an authenticated out‑of‑bounds write in SAP NetWeaver and recommends applying a temporary workaround via ICF nodes and updating to the latest version.