SAP CVE-2026-44756: CVSS 10.0 Pre-Auth RCE via EPP
SAP's ABAP and Java kernels carry a CVSS 10.0 hole in Extended Passport (EPP) deserialization. An unauthenticated attacker on the network can run arbitrary OS commands with SAP admin privileges before
404-founders.com4 min read