Low severity · published Sep 8, 2026
CVE-2026-58234
Denial of Service vulnerability in SAP Process Integration (SOAP Adapter)
2.2
CVSS
0.3%
EPSS
No
On KEV
Description
SAP Process Integration (SOAP Adapter) allows a privileged user to send specially crafted requests containing deeply nested entity definitions, which under certain conditions could temporarily increase processor load and degrade system responsiveness. Successful exploitation results in low impact on availability with no impact on confidentiality and integrity.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L
Attack vector
Network
Complexity
High
Privileges
High
User interaction
None
Confidentiality
None
Integrity
None
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 27% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SP
SAP Process Integration (SOAP Adapter) · SAP_SE
MESSAGING 7.50; SAP_XIAF 7.50 · source: vendor
Affected product
SP
SAP Process Integration (SOAP Adapter)
SAP_SE