VDB
GCVE-110-CERTCA-2026-894
GCVE-110-CERTCA-2026-894
Advisory Published
As of September 8, 2026, SAP_SE is affected by vulnerabilities in the following products:
SAP Extended Passport (EPP) Processing – KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.22EXT, 7.53, 8.04, WEBDISP 9.16, 9.18, 9.19, 9.20, KERNEL 7.22, 7.53, 7.54, 7.77, 7.89, 7.93, 8.04, 9.16, 9.18, 9.19 and 9.20
SAP NetWeaver (Message Server) - versions KERNEL 9.16, 9.18, 9.19, and 9.20
SAP Cloud Application Programming Model (CAP)
prior or equal to 1.183
prior or equal to 2.7.6
prior or equal to 3.9.6
prior or equal to 4.0.2
SAP NetWeaver (SAP GUI for Java) - version BC-FES-JAV 8.10
SAP Integration Suite
Version Cloud Integration - Trading Partner Management V2 2.9.2,
Version B2B Integration Factory - Cloud Integration - Trading Partner Management 1.10.0
SAP NetWeaver Business Client – versions BC-WD-CLT-BUS 8.00 and 8.10
SAP NetWeaver Application Server for ABAP and ABAP Platform – versions KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.22EXT, 7.53, 8.04, KERNEL 7.22, 7.53, 7.54, 7.77, 7.93, 8.04, 9.16, 9.18, 9.19 and 9.20
The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| prior | prior or equal to 4.0.2 | — | — |
| SAP | SAP Extended Passport (EPP) Processing – KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.22EXT, 7.53, 8.04, WEBDISP 9.16, 9.18, 9.19, 9.20, KERNEL 7.22, 7.53, 7.54, 7.77, 7.89, 7.93, 8.04, 9.16, 9.18, 9.19 and 9.20 | — | — |
| prior | prior or equal to 3.9.6 | — | — |
| prior | prior or equal to 1.183 | — | — |
| SAP | SAP NetWeaver (Message Server) - versions KERNEL 9.16, 9.18, 9.19, and 9.20 | — | — |
| prior | prior or equal to 2.7.6 | — | — |
| Version | Version Cloud Integration - Trading Partner Management V2 2.9.2, | — | — |
| Version | Version B2B Integration Factory - Cloud Integration - Trading Partner Management 1.10.0 | — | — |
Browse GCVE Records
556 records in the GCVE database · Updated September 9, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.