PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-40130 SAP_SE CVE debrief

The SAP SAPSPrint Service has memory corruption vulnerabilities in the handling of certain commands. An unauthenticated attacker could send specially crafted requests that trigger a buffer overflow in the affected component, causing a temporary service interruption and automatic restart. This issue affects SAP systems with the SAPSPrint Service deployed. The CVE record was published on 2026-08-11T01:17:20.540Z and has not been modified since then. The NVD entry is currently Awaiting Analysis. SAP administrators and security teams should review SAP security advisories for patch availability and apply updates to mitigate potential service interruptions. They should also verify service configuration and access controls, and monitor for unusual activity.

Vendor
SAP_SE
Product
SAPSPrint Service
CVSS
MEDIUM 5.3
CISA KEV
Not listed in stored evidence
Original CVE published
2026-08-11
Original CVE updated
2026-08-26
Advisory published
2026-08-11
Advisory updated
2026-08-26

Who should care

SAP administrators and security teams responsible for SAP systems, especially those with SAPSPrint Service deployed, should review and apply patches to mitigate potential service interruptions. They should also verify service configuration and access controls, and monitor for unusual activity. Security teams with SAP systems in their environment should prioritize this vulnerability for patching and review compensating controls if patches are not immediately available.

Technical summary

The SAP SAPSPrint Service has memory corruption vulnerabilities in the handling of certain commands. An unauthenticated attacker could send specially crafted requests that trigger a buffer overflow in the affected component, causing a temporary service interruption and automatic restart. This issue affects SAP systems with the SAPSPrint Service deployed. Security teams should review SAP security advisories for patch availability.

Defensive priority

Medium-priority defensive review recommended due to potential service interruption.

Recommended defensive actions

  • Review SAP security advisories for patch availability and apply updates
  • Monitor SAP SAPSPrint Service for unusual activity
  • Verify service configuration and access controls
  • Perform asset inventory of SAP systems with SAPSPrint Service deployed
  • Review compensating controls for exposed systems while remediation is scheduled and verified
  • Check relevant monitoring, detection, and logs for exposed assets that need extra review
  • Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

Evidence from official CVE Program record and NIST NVD detail page indicates memory corruption vulnerabilities in SAP SAPSPrint Service. Limited detail available on affected scope and vendor remediation. Defenders should verify service configuration, access controls, and monitor for unusual activity. Additional review of SAP security advisories is recommended.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-40130 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-40130

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-40130 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-40130

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.