SAP Landscape Transformation Vulnerability in RFC Function Module

CVE-2026-27675

What is CVE-2026-27675?

The issue arises from an exposed RFC function module within SAP Landscape Transformation, allowing a privileged attacker to inject arbitrary ABAP code along with operating system commands. Although some information may be altered as a result of this exploit, the attacker has limited control over the nature and extent of modifications. As a direct consequence, while the integrity of the system might be somewhat compromised, the confidentiality and availability remain unaffected. This vulnerability underscores the importance of securing RFC-exposed interfaces to prevent unauthorized access and code execution.

References