Log in Start free

Vulnerability · Published Apr 14, 2026 · Assigned by sap

CVE-2026-27675Code Injection vulnerability in SAP Landscape Transformation

Low 2.0

In plain English

A low-severity code injection in SAP Landscape Transformation from SAP_SE. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 6% of all known vulnerabilities).

Severity (CVSS 3.1)2.0Low
Exploit odds (30 days)0.2%top 93.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

SAP Landscape Transformation contains a vulnerability in an RFC-exposed function module that could allow a high privileged adversary to inject arbitrary ABAP code and operating system commands. Due to this, some information could be modified, but the attacker does not have control over kind or degree. This leads to a low impact on integrity, while confidentiality and availability are not impacted.

Affected products (as reported)

VendorProductVersions
SAP_SE SAP Landscape Transformation DMIS 2011_1_7002011_1_7102011_1_7302011_1_7312011_1_7522020S4CORE 102103

Weakness: CWE-94 · Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N

References