CVE-2026-58235
published 2026-08-11CVE-2026-58235: SAP NetWeaver Application Server Java (Adobe Document Service) uses outdated open source cryptographic and data transfer libraries that contain known…
PriorityP339medium6.3CVSS 3.1
AVNACLPRLUINSUCLILAL
EPSS
0.29%
21.0th percentile
SAP NetWeaver Application Server Java (Adobe Document Service) uses outdated open source cryptographic and data transfer libraries that contain known vulnerabilities addressed in later versions. A low-privileged authenticated attacker could potentially leverage these weaknesses against the affected component, though no specific exploit is currently known. Successful exploitation could result in low impact on confidentiality, integrity, and availability of the system.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sap_se | sap_netweaver_as_java | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
SAP NetWeaver AS Java 7.50 Adobe Document Service privilege escalation
vuldb·2026-08-11·CVSS 6.3
CVE-2026-58235 [MEDIUM] SAP NetWeaver AS Java 7.50 Adobe Document Service privilege escalation
A vulnerability labeled as critical has been found in SAP NetWeaver AS Java 7.50. This affects an unknown part of the component Adobe Document Service. Such manipulation leads to privilege escalation.
This vulnerability is referenced as CVE-2026-58235. It is possible to launch the attack remotely. No exploit is available.
GHSA
SAP NetWeaver Application Server Java (Adobe Document Service) uses outdated open source cryptographic and data transfer libraries that contain known vulnerabilities addressed in later versions.
ghsa_unreviewed·2026-08-11
CVE-2026-58235 [MEDIUM] SAP NetWeaver Application Server Java (Adobe Document Service) uses outdated open source cryptographic and data transfer libraries that contain known vulnerabilities addressed in later versions.
SAP NetWeaver Application Server Java (Adobe Document Service) uses outdated open source cryptographic and data transfer libraries that contain known vulnerabilities addressed in later versions. A low-privileged authenticated attacker could potentially leverage these weaknesses against the affected component, though no specific exploit is currently known. Successful exploitation could result in low impact on confidentiality, integrity, and availability of the system.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-08-11
Published