VulnerabilityAwaiting Analysis

CVE-2026-40130

SAP SAPSPrint Service has memory corruption vulnerabilities in the handling of certain commands.

MEDIUM 5.3EPSS 0.35%

Does this matter?

Lower severity and a low EPSS score (0.35%). Track it; it rarely justifies an emergency change on its own.

Description

SAP SAPSPrint Service has memory corruption vulnerabilities in the handling of certain commands. An unauthenticated attacker could send specially crafted requests that trigger a buffer overflow in the affected component. This causes a temporary service interruption and automatic restart, resulting in low impact on availability but no impact on confidentiality and integrity.

CVSS 3.1: 5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS: 0.35% probability · 28th percentile
CISA KEV: Not listed
Weakness: CWE-121
Source: cna@sap.com

References

https://me.sap.com/notes/3725940
https://url.sap/sapsecuritypatchday

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.