What is GHSA-rvg2-xqmh-v3qw?

GHSA-rvg2-xqmh-v3qw is a security advisory published by GitHub Security Advisories with Critical severity. Due to improper RFC protocol validation in the SAP Kernel used by the Application Server ABAP of...

Which CVE IDs does GHSA-rvg2-xqmh-v3qw cover?

GHSA-rvg2-xqmh-v3qw covers the following CVE IDs: CVE-2026-27671. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-rvg2-xqmh-v3qw?

GHSA-rvg2-xqmh-v3qw has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

GHSA-rvg2-xqmh-v3qwCriticalCVSS 9.8

Due to improper RFC protocol validation in the SAP Kernel used by the Application Server ABAP of...

Vendor

GitHub Security Advisories

Published

June 9, 2026

Last Modified

June 9, 2026

🔗 CVE IDs covered (1)

CVE-2026-27671 →

📋 Description

Due to improper RFC protocol validation in the SAP Kernel used by the Application Server ABAP of SAP NetWeaver and ABAP Platform, an unauthenticated attacker can send a crafted RFC request that exploits logical errors in memory management, leading to memory corruption. This could lead to a high impact on the confidentiality, integrity, and availability of the application.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-27671
https://me.sap.com/notes/3717897
https://url.sap/sapsecuritypatchday
https://github.com/advisories/GHSA-rvg2-xqmh-v3qw