SAP ABAP Platform unauth memory disclosure via internal component
CVE-2026-58247 Published on August 11, 2026
Memory Corruption vulnerability in SAP ABAP Platform
SAP ABAP Platform allows an unauthenticated user to send a specially crafted request to an internal component. This could disclose limited, non-sensitive data from previously used memory, leading to a low on confidentiality, with no impact on integrity and availability of the application.
Vulnerability Analysis
CVE-2026-58247 can be exploited with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality, a small impact on integrity and availability.
Weakness Type
Use of Uninitialized Resource
The software uses or accesses a resource that has not been initialized. When a resource has not been properly initialized, the software may behave unexpectedly. This may lead to a crash or invalid memory access, but the consequences vary depending on the type of resource and how it is used within the software.
Products Associated with CVE-2026-58247
Want to know whenever a new CVE is published for SAP Abap Platform? stack.watch will email you.
Affected Versions
SAP_SE SAP ABAP Platform:- Version KRNL64UC 7.53 is affected.
- Version KERNEL 7.53 is affected.
- Version 7.54 is affected.
- Version 7.77 is affected.