PT-2026-32555 · Sap Se · Sap Landscape Transformation

Published 2026-04-14 · Updated 2026-04-14 · CVE-2026-27675

NVD

CVSS v3.1

2.0

Low

AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N

SAP Landscape Transformation contains a vulnerability in an RFC-exposed function module that could allow a high privileged adversary to inject arbitrary ABAP code and operating system commands. Due to this, some information could be modified, but the attacker does not have control over kind or degree. This leads to a low impact on integrity, while confidentiality and availability are not impacted.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2026-27675

Affected Products

Sap Landscape Transformation

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-27675 · Security Note
• https://url.sap/sapsecuritypatchday · Note
• https://twitter.com/CVEnew/status/2043976166357258593 · Twitter Post
• https://twitter.com/CVEarity/status/2044042722106061274 · Twitter Post
• https://me.sap.com/notes/3723097 · Note