CVE-2026-58234
published 2026-09-08CVE-2026-58234: SAP Process Integration (SOAP Adapter) allows a privileged user to send specially crafted requests containing deeply nested entity definitions, which under…
PriorityP410low2.2CVSS 3.1
AVNACHPRHUINSUCNINAL
EPSS
0.34%
26.1th percentile
SAP Process Integration (SOAP Adapter) allows a privileged user to send specially crafted requests containing deeply nested entity definitions, which under certain conditions could temporarily increase processor load and degrade system responsiveness. Successful exploitation results in low impact on availability with no impact on confidentiality and integrity.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sap_se | sap_process_integration | — | — |
| sap_se | sap_process_integration | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
SAP Process Integration (SOAP Adapter) allows a privileged user to send specially crafted requests containing deeply nested entity definitions, which under certain conditions could temporarily increas
ghsa_unreviewed·2026-09-08
CVE-2026-58234 [LOW] CWE-776 SAP Process Integration (SOAP Adapter) allows a privileged user to send specially crafted requests containing deeply nested entity definitions, which under certain conditions could temporarily increas
SAP Process Integration (SOAP Adapter) allows a privileged user to send specially crafted requests containing deeply nested entity definitions, which under certain conditions could temporarily increase processor load and degrade system responsiveness. Successful exploitation results in low impact on availability with no impact on confidentiality and integrity.
VulDB
SAP Process Integration MESSAGING 7.50/SAP_XIAF 7.50 SOAP Adapter allocation of resources
vuldb·2026-09-08·CVSS 2.2
CVE-2026-58234 [LOW] SAP Process Integration MESSAGING 7.50/SAP_XIAF 7.50 SOAP Adapter allocation of resources
A vulnerability, which was classified as problematic, was found in SAP Process Integration MESSAGING 7.50/SAP_XIAF 7.50. The affected element is an unknown function of the component SOAP Adapter. The manipulation results in allocation of resources.
This vulnerability is reported as CVE-2026-58234. The attack can be launched remotely. No exploit exists.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-09-08
Published