CVE-2020-26826: SAP NetWeaver Application Server Java

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Process Integration Monitoring of SAP NetWeaver AS JAVA, versions - 7.31, 7.40, 7.50, allows an attacker to upload any file (including script files) without proper file format validation, leading to Unrestricted File Upload.

Affected products

• SAP NetWeaver Application Server Java: version 7.31 only; version 7.40 only; version 7.50 only

Published 2020-12-09. Last modified 2026-06-17.