Critical severity10.0NVD Advisory· Published Sep 8, 2026· Updated Sep 22, 2026
CVE-2026-44756
CVE-2026-44756
Description
A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Under specific conditions, an unauthenticated attacker could exploit a crafted network request containing a malformed EPP header, potentially resulting in undefined behavior and abnormal program termination. Successful exploitation may have a high impact on the confidentiality, integrity, and availability of the application.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
3News mentions
7- In Other News: Ransomware Developer Sentenced, Plugin4Shell AI Attack, Critical SAP FlawSecurityWeek · Sep 18, 2026
- ⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and RootkitsThe Hacker News · Sep 14, 2026
- Breach Roundup: ShinyHunters Claims Florida DMV HackGovInfoSecurity · Sep 10, 2026
- SAP Patches Maximum Severity “Overpass” FlawInfosecurity Magazine · Sep 9, 2026
- SAP Patches CVSS 10.0 Kernel Flaw Enabling Unauthenticated Remote Code ExecutionThe Hacker News · Sep 9, 2026
- SAP Patches Critical Extended Passport Processing VulnerabilitySecurityWeek · Sep 8, 2026
- SAP Security Updates September 2026 – Critical Flaws Patched in SAP NetWeaver, Cloud and Extended PassportCyber Security News · Sep 8, 2026