SAP NetWeaver Application Server ABAP is a component of the SAP NetWeaver platform that serves as the runtime environment for ABAP-based applications in the SAP system landscape. It is specifically designed to host and execute applications developed using the ABAP programming language.

SAP NetWeaver Application Server ABAP

SAP NetWeaver Application Server Java is a component of the SAP NetWeaver platform that provides a runtime environment for Java-based applications and services in the SAP system landscape. It is specifically designed to host and execute applications developed using the Java programming language.

SAP NetWeaver Application Server Java

SAP NetWeaver Message Server does not sufficiently validate the authenticity of internal application server components during registration. An unauthenticated attacker with network access to the affected service could exploit this weakness to register an unauthorized component and potentially perform unauthorized actions within the application environment, resulting in a high impact on the confidentiality, integrity, and availability of the affected system.

CVE-2026-58240

Linux

Linux Kernel

Windows

Windows Cumulative Update

A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Under specific conditions, an unauthenticated attacker could exploit a crafted network request containing a malformed EPP header, potentially resulting in undefined behavior and abnormal program termination. Successful exploitation may have a high impact on the confidentiality, integrity, and availability of the application.

CVE-2026-44756

N-central is a remote monitoring and management (RMM) and unified endpoint management platform developed by N-able. It is primarily designed for managed service providers (MSPs) and IT departments to remotely monitor, manage, and secure complex networks and diverse endpoint devices. The platform streamlines IT operations by offering automated patch management, asset discovery, and integrated security tools to proactively protect environments.

N-central

N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.

CVE-2026-86218

JFrog Artifactory is a universal repository manager that simplifies the management and distribution of software artifacts. It serves as a central hub for storing, versioning, and securing binaries, libraries, and dependencies. With seamless integration and robust features, Artifactory enhances automation, traceability, and DevOps practices for software development teams.

Artifactory

JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges.

CVE-2026-82329

Homebrew

VulnCheck NVD++

PaperCut NG is a print management software solution designed to help organizations monitor, control, and manage their printing resources. It provides various features and tools to optimize printing workflows, reduce waste, and enhance document security.

PaperCut NG

PaperCut MF is a low-cost, multi-platform software solution that enables schools, libraries, and businesses of any size to manage, account for, and recover print, copy, fax, and scan output via user login or card ID. Typical uses include student/patron charging, staff account billing, secure job release with "Find Me" pull printing, driverless web printing, and auto-enforced job routing based on administrator-defined attributes.

PaperCut MF

An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based on configurable driver names without validating against an allowlist of approved drivers. If an attacker can manipulate system configuration parameters, this enables the execution of arbitrary Java bytecode residing on the application classpath under the security context of the PaperCut server process.

CVE-2026-82078

WordPress is a content management system paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system, referred to within WordPress as Themes.

WordPress

The plugin does not sanitize and escape several shortcode attributes before rendering them into HTML, allowing users with contributor-level access and above to inject arbitrary web scripts that execute when the affected content is viewed.

CVE-2026-83532

Debian GNU/Linux is a Linux distribution composed of free and open-source software.

Linux Debian

Echo is a secure, minimal Linux OS built vulnerability-free. It is fully compatible across environments and continuously patched - making it a clean, dependable base layer for modern applications. Echo is used by organizations focused on security and reliability, including those with compliance or FIPS requirements.

Echo

An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is a timing side channel for NIST elliptic-curve scalar multiplication: the time required for a lookup can depend on a secret.

CVE-2026-87737

Debian

Debian Security Tracker

An issue was discovered in the mirage-crypto-ec package before 2.3.0 for OCaml. There is an EC public key out-of-bounds read for compressed points.

CVE-2026-87736

An issue was discovered in the mirage-crypto-pk package before 2.3.0 for OCaml. There is an undocumented exception for a small message during RSA decryption or encryption.

CVE-2026-87735

An issue was discovered in the mirage-crypto-ec function before 2.2.0 for OCaml. The ECDSA functions {P256,P384,P521}.Dsa.pub_of_octets accept 0x00, the encoding of the point at infinity, as a public key. With that public key, signatures can be forged without a private key.

CVE ID	Severità	Punteggio	Tecnologie	Nome del componente	Exploit CISA KEV	Ha la correzione	Data di pubblicazione
CVE-2026-58240	CRITICAL	9.8	SAP NetWeaver Application Server ABAP	cpe:2.3:a:sap:netweaver_application_server_java	No	No	Sep 08, 2026
CVE-2026-44756	CRITICAL	10	SAP NetWeaver Application Server ABAP	cpe:2.3:a:sap:netweaver_application_server_abap	No	Sì	Sep 08, 2026
CVE-2026-86218	CRITICAL	10	N-central	cpe:2.3:a:n-able:n-central	Sì	Sì	Sep 06, 2026
CVE-2026-82329	CRITICAL	9.8	Artifactory	cpe:2.3:a:jfrog:artifactory	Sì	Sì	Aug 28, 2026
CVE-2026-82078	CRITICAL	9.4	PaperCut NG	cpe:2.3:a:papercut:papercut_mf	Sì	Sì	Aug 28, 2026

CVE ID	Severità	Punteggio	Tecnologie	Nome del componente	Exploit CISA KEV	Ha la correzione	Data di pubblicazione
CVE-2026-83532	MEDIUM	6.8	WordPress	custom-menu-wizard	No	No	Sep 09, 2026
CVE-2026-87737	MEDIUM	5.9	Linux Debian	ocaml-mirage-crypto	No	Sì	Sep 09, 2026
CVE-2026-87736	MEDIUM	4.3	Linux Debian	ocaml-mirage-crypto	No	Sì	Sep 09, 2026
CVE-2026-87735	MEDIUM	4.3	Linux Debian	ocaml-mirage-crypto	No	Sì	Sep 09, 2026
CVE-2026-87733	MEDIUM	6.2	Linux Debian	ocaml-mirage-crypto	No	Sì	Sep 09, 2026

Database delle vulnerabilità Wiz

Esplora per tecnologia

Filtri popolari

Alto profilo

Più recenti

I numeri delle vulnerabilità

Il buono, il cattivo e il vulnerabile

Ulteriori risorse Wiz

PEACH

Pronti a vedere Wiz in azione?