Java – CyberSecurityBoard

Critical CVEs

A directory traversal vulnerability in SAP NetWeaver Application Server Java (Web Container). CVSS score 9.0.

CVE-2026-40128 directory traversal Java NetWeaver

June 25, 2026