Critical CVEs CVE-2026-40128: SAP NetWeaver Application Server Java Directory Traversal Vulnerability June 25, 2026 ♡Follow0 A directory traversal vulnerability in SAP NetWeaver Application Server Java (Web Container). CVSS score 9.0. Discovered from: Ivanti, Fortinet, and SAP Release Patches for Multiple Critical Vulnerabilities CVE-2026-40128directory traversalJavaNetWeaverSAP