Insecure Deserialization Vulnerability in SAP Change and Transport System Attach Tool

CVE-2026-58233

What is CVE-2026-58233?

The SAP Change and Transport System Attach Tool (ctsattach) is vulnerable to an insecure deserialization flaw, enabling authenticated attackers to upload specially crafted archive files. When these files are processed, it can result in remote code execution (RCE), allowing the attacker to gain unauthorized access to sensitive data and manipulate the system and its underlying processes. This vulnerability poses significant risks to the confidentiality and integrity of data managed by the affected system.

References