CVE-2026-44756
Received Received - Intake

Memory Corruption in EPP Processing Library

Publication date: 2026-09-08

Last updated on: 2026-09-08

Assigner: SAP SE

Description
A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Under specific conditions, an unauthenticated attacker could exploit a crafted network request containing a malformed EPP header, potentially resulting in undefined behavior and abnormal program termination. Successful exploitation may have a high impact on the confidentiality, integrity, and availability of the application.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-08
Last Modified
2026-09-08
Generated
2026-09-08
AI Q&A
2026-09-08
EPSS Evaluated
N/A
NVD
CVE-2026-44756
EUVD
EUVD-2026-72572

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
sap extended_passport_protocol *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-120 The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a memory safety vulnerability in the Extended Passport Protocol (EPP) processing library. An unauthenticated attacker could send a crafted network request with a malformed EPP header, causing undefined behavior and program crashes. Exploitation may lead to high impacts on confidentiality, integrity, and availability of the affected application.

Impact Analysis

An attacker could exploit this to crash the application, potentially leading to denial of service. It may also allow unauthorized access to sensitive data or manipulation of system behavior, depending on the application's context and environment.

Compliance Impact

This vulnerability could lead to data breaches or unauthorized access, violating GDPR's confidentiality requirements and HIPAA's safeguards for protected health information. Non-compliance risks include legal penalties, reputational damage, and loss of trust.

Mitigation Strategies

Apply the latest security patches or updates from SAP addressing the Extended Passport Protocol (EPP) library vulnerability. Monitor network traffic for malformed EPP headers or unusual requests. Restrict network access to EPP services if possible.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-44756. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart