PT-2026-43351 · Sap · Sap Gateway

Published 2026-05-26 · Updated 2026-05-26 · CVE-2026-44749

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions SAP Gateway (affected versions not specified)

Description SAP Gateway allows attackers to inject content into error messages. This can lead to the disclosure of request artefacts, such as regex patterns, and reveal the underlying URI parsing logic, resulting in a low impact on confidentiality. Integrity and availability remain unaffected.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-497

Related Identifiers

CVE-2026-44749

Affected Products

Sap Gateway

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-44749 · Security Note
• https://me.sap.com/notes/3433366 · Note
• https://twitter.com/CVEnew/status/2059337169425056086 · Twitter Post
• https://url.sap/sapsecuritypatchday · Note