Severity: Critical, High, Medium

Description: SAS Web Server 9.52 hot fixes address the following security vulnerabilities. These hot fixes are cumulative; therefore, only the most recent hot fix is required to address all vulnerabilities listed below.

See KB0046220 for the current supported Apache HTTP Server (httpd), OpenSSL and Apache Tomcat versions in SAS® 9.4.

 

Addressed in hot fix R1C003

CVE-2026-23918	CVE-2026-24072	CVE-2026-28780	CVE-2026-29167	CVE-2026-29168
CVE-2026-29169	CVE-2026-29170	CVE-2026-33006	CVE-2026-33007	CVE-2026-33523
CVE-2026-33857	CVE-2026-34032	CVE-2026-34059	CVE-2026-34355	CVE-2026-34356
CVE-2026-42535	CVE-2026-42536	CVE-2026-43951	CVE-2026-44119	CVE-2026-44185
CVE-2026-44186	CVE-2026-44631	CVE-2026-48913	CVE-2026-49975

 

Addressed in hot fix R1C002

CVE-2025-15467	CVE-2025-55753	CVE-2025-58098	CVE-2025-59775	CVE-2025-65082
CVE-2025-66200

 

Addressed in hot fix R1C001

CVE-2025-9230

CVE-2025-9232

 

Potential Impact: See the CVE records for additional information.