CVE-2026-58234

LowCVSS 2.2/10Last modified Sep 8, 2026

Description

SAP Process Integration (SOAP Adapter) allows a privileged user to send specially crafted requests containing deeply nested entity definitions, which under certain conditions could temporarily increase processor load and degrade system responsiveness. Successful exploitation results in low impact on availability with no impact on confidentiality and integrity.

Metrics

CVSS 3.1 2.2/10CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-776

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Sep 8, 2026
Last modified
Sep 8, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-582356.3SAP NetWeaver Application Server Java (Adobe Document Service) uses outdated open source cryptographic and data transfer libraries that contCVE-2026-582365.5SAP NetWeaver Application Server ABAP and ABAP Platform allow an attacker with high privileges to bypass missing security controls on an intCVE-2026-582375.9WebSocket of SAP Approuter does not perform sufficient authorization checks in certain functionality. An attacker with low privileges could CVE-2026-582385.9SAP Approuter does not sufficiently handle certain requests under specific conditions. An unauthenticated attacker could send specially crafCVE-2026-582393.7SAP Approuter does not sufficiently validate tenant context in inbound requests. An unauthenticated attacker could send specially crafted reCVE-2026-58247.3A security vulnerability has been detected in code-projects Simple Laundry System 1.0. This affects an unknown part of the file /usercheckloCVE-2026-582409.8SAP NetWeaver Message Server does not sufficiently validate the authenticity of internal application server components during registration. CVE-2026-582414.2SAP NetWeaver and ABAP Platform (Change and Transport System - Customer Transport Integration Wizard) allows a low-privileged user to modifyCVE-2026-582423.5SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker through specially crafteCVE-2026-582438.8SAP ABAP Development Tools does not perform necessary authorization checks for certain functionality, allowing an attacker with low privilegCVE-2026-582444.3SAP Manufacturing Integration and Intelligence (MII) does not perform necessary authorization check on certain application function, allowinCVE-2026-582453.8SAP Advanced Planning and Optimization (Model Mix Planning) contains a hardcoded credential within the source code of the application to per
CVE-2026-58234: Low severity, CVSS 2.2 | Vulnix