SAP SE SAP Landscape Transformation vulnerabilities

2 CVEs affecting SAP SE SAP Landscape Transformation, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-27675, published 2026-04-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-0491, published 2026-01-13. Critical severity, CVSS 9.1. EPSS: 0.5% chance of exploitation in the next 30 days. SAP Landscape Transformation allows an attacker with admin privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code/OS…
CVE-2026-27675, published 2026-04-14. Low severity, CVSS 2.0. EPSS: 0.2% chance of exploitation in the next 30 days. SAP Landscape Transformation contains a vulnerability in an RFC-exposed function module that could allow a high privileged adversary to inject arbitrary ABAP code and operating system commands. Due…