CVE-2022-26100: SAP Sapcar

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

SAPCAR - version 7.22, does not contain sufficient input validation on the SAPCAR archive. As a result, the SAPCAR process may crash, and the attacker may obtain privileged access to the system.

Affected products

• SAP Sapcar: version 7.22 only

Published 2022-03-10. Last modified 2026-06-17.