sap_netweaver_message_server vulnerabilities

CVEs whose affected-version data names the sap_netweaver_message_server package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-58240Critical· 9.8

2w ago

SAP NetWeaver Message Server does not sufficiently validate the authenticity of internal application server components during registration

SAP NetWeaver Message Server does not sufficiently validate the authenticity of internal application server components during registration. An unauthenticated attacker with network access to the affected service could exploit this weakne…

▾ MidnightSAP_SE · SAP NetWeaver (Message Server)EPSS 0.34%via NVD