CVE-2026-40130

SAP SAPSPrint Service has memory corruption vulnerabilities in the handling of certain commands. An unauthenticated attacker could send specially crafted requests that trigger a buffer overflow in the affected component. This causes a temporary service interruption and automatic restart, resulting in low impact on availability but no impact on confidentiality and integrity.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://me.sap.com/notes/3725940
https://url.sap/sapsecuritypatchday

Configurations

No configuration.

History

23 Oct 2026, 19:10

Type	Values Removed	Values Added
Summary		(es) El servicio SAP SAPSPrint tiene vulnerabilidades de corrupción de memoria en el manejo de ciertos comandos. Un atacante no autenticado podría enviar solicitudes especialmente diseñadas que desencadenan un desbordamiento de búfer en el componente afectado. Esto causa una interrupción temporal del servicio y un reinicio automático, lo que resulta en un bajo impacto en la disponibilidad, pero sin impacto en la confidencialidad y la integridad.

Information

Published : 2026-08-11 01:17

Updated : 2026-10-23 19:10

NVD link : CVE-2026-40130

Mitre link : CVE-2026-40130

CVE.ORG link : CVE-2026-40130

JSON object : View

Products Affected

No product.

CWE

CWE-121

Stack-based Buffer Overflow

{"id": "CVE-2026-40130", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-40130", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-11T13:36:36.329393Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "cna@sap.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "affected": [{"source": "cna@sap.com", "affectedData": [{"vendor": "SAP_SE", "product": "SAPSPrint Service", "versions": [{"status": "affected", "version": "SAPSPRINT 8.00"}, {"status": "affected", "version": "8.10"}], "defaultStatus": "unaffected"}]}], "published": "2026-08-11T01:17:20.540", "references": [{"url": "https://me.sap.com/notes/3725940", "source": "cna@sap.com"}, {"url": "https://url.sap/sapsecuritypatchday", "source": "cna@sap.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "cna@sap.com", "description": [{"lang": "en", "value": "CWE-121"}]}], "descriptions": [{"lang": "en", "value": "SAP SAPSPrint Service has memory corruption vulnerabilities in the handling of certain commands. An unauthenticated attacker could send specially crafted requests that trigger a buffer overflow in the affected component. This causes a temporary service interruption and automatic restart, resulting in low impact on availability but no impact on confidentiality and integrity."}, {"lang": "es", "value": "El servicio SAP SAPSPrint tiene vulnerabilidades de corrupci\u00f3n de memoria en el manejo de ciertos comandos. Un atacante no autenticado podr\u00eda enviar solicitudes especialmente dise\u00f1adas que desencadenan un desbordamiento de b\u00fafer en el componente afectado. Esto causa una interrupci\u00f3n temporal del servicio y un reinicio autom\u00e1tico, lo que resulta en un bajo impacto en la disponibilidad, pero sin impacto en la confidencialidad y la integridad."}], "lastModified": "2026-10-23T19:10:00.167", "sourceIdentifier": "cna@sap.com"}