Severity: Critical/High/Medium/Low

Description: SAS Web Application Server 9.53 hot fixes address the following security vulnerabilities. These hot fixes are cumulative; therefore, only the most recent hot fix is required to address all vulnerabilities listed below.

See SAS KB0046220 for the current supported Apache HTTP Server (httpd), OpenSSL and Apache Tomcat versions in SAS 9.4. 

 

Addressed in hot fix P6T005

CVE-2026-24880	CVE-2026-25854	CVE-2026-29129	CVE-2026-29145	CVE-2026-29146
CVE-2026-32990	CVE-2026-34197	CVE-2026-34483	CVE-2026-34486	CVE-2026-34487
CVE-2026-34500	CVE-2026-40466	CVE-2026-41043	CVE-2026-41044	CVE-2026-41284
CVE-2026-41293	CVE-2026-42253	CVE-2026-42498	CVE-2026-42588	CVE-2026-43512
CVE-2026-43513	CVE-2026-43514	CVE-2026-43515	CVE-2026-45505	CVE-2026-46605
CVE-2026-49270	CVE-2026-49432	CVE-2026-50229	CVE-2026-50734	CVE-2026-53404
CVE-2026-53434	CVE-2026-53916	CVE-2026-53917	CVE-2026-55276	CVE-2026-55955
CVE-2026-55956

 

Addressed in hot fix P6T004

CVE-2026-24733	CVE-2026-24734	CVE-2026-33227	CVE-2026-33453	CVE-2026-39304
CVE-2025-66614

 

Addressed in hot fix P6T003

CVE-2024-6763

CVE-2025-68161

 

Addressed in hot fix P6T002

CVE-2025-48989

CVE-2025-55752

CVE-2025-55754

CVE-2025-61795

 

Addressed in hot fix P6T001

CVE-2024-6763	CVE-2025-27533	CVE-2025-48734	CVE-2025-31650	CVE-2025-31651
CVE-2025-46701	CVE-2025-48976	CVE-2025-48988	CVE-2025-49124	CVE-2025-49125
CVE-2025-49215	CVE-2025-52520	CVE-2025-53506

 

Potential Impact: See the CVE records for additional information.