CVE-2026-58235

Medium

Description

SAP NetWeaver Application Server Java (Adobe Document Service) uses outdated open source cryptographic and data transfer libraries that contain known vulnerabilities addressed in later versions. A low-privileged authenticated attacker could potentially leverage these weaknesses against the affected component, though no specific exploit is currently known. Successful exploitation could result in low impact on confidentiality, integrity, and availability of the system.

SeverityMedium
CVSS6.3
Exploit probability—
ProductSAP NetWeaver AS Java (Adobe Document Services)
PublishedAug 11, 2026
First seenAug 11, 2026
Weakness typeCWE-1395CWE-1395

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
SAP_SE SAP NetWeaver AS Java (Adobe Document Services)ADSSAP 7.50—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-58235 · SAP NetWeaver AS Java (Adobe Document Services) · Dark Radar