SAP Note 3773304
Remote Code Execution vulnerability in SAP Change and Transport System Attach Tool (ctsattach)
HighCVSS 7.6SAP Change and Transport System Attach Tool
Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required).
- CVE(s)
- CVE-2026-58233
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L
Affected products and versions
- Product SAP Change and Transport System Attach Tool (ctsattach)
Versions: CTS_UPLOAD_CLT 1
Appears in
Patch Days listing this note, newest first.
- July 2026HighCVSS 7.6