Onapsis

Mentions · 7d0
Mentions · 30d0
All mentions6
First seenAug 12, 2026
Last mentionedSep 18, 2026

Timeline

6 articles · newest first

In Other News: Ransomware Developer Sentenced, Plugin4Shell AI Attack, Critical SAP Flaw

SecurityWeek roundup: ransomware developer sentenced, critical SAP flaw CVE-2026-44756, PhantomRaven npm info-stealer, WordPress mass exploitation, and AI agent security findings.

SecurityWeekSep 18, 14:25 UTC · Sep 18, 2026IndustryExploitedCVE-2026-44756 CVE-2026-15315 CVE-2026-153164

SAP Patches Maximum Severity “Overpass” Flaw

Onapsis warns over 10,000 internet-facing SAP systems may be exposed to maximum-severity unauthenticated RCE flaw CVE-2026-44756 in SAP Extended Passport.

Infosecurity MagazineSep 9, 08:15 UTC · Sep 9, 2026VulnerabilityCVE-2026-44756 CVE-2026-58240 CVE-2026-76969+11 · 1 read

SAP warns of maximum severity 'OVERPASS' kernel vulnerability

SAP's September 2026 patches fix maximum-severity kernel flaw CVE-2026-44756 (OVERPASS), letting unauthenticated attackers execute commands on 10,000+ internet-facing SAP systems.

BleepingComputerSep 8, 14:55 UTC · Sep 8, 2026Vulnerability 2 sourcesCVE-2026-44756 CVE-2026-58240 CVE-2026-582311

SAP Patches Critical Extended Passport Processing Vulnerability

SAP patches CVSS 10.0 flaw CVE-2026-44756 (OVERPASS) enabling unauthenticated RCE in S/4HANA and NetWeaver, plus three other criticals; no in-the-wild exploitation reported.

SecurityWeekSep 8, 14:55 UTC · Sep 8, 2026Vulnerability 2 sourcesCVE-2026-44756 CVE-2026-58240 CVE-2026-76969+12

SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch

A maximum-severity (CVSS 10.0) unauthenticated RCE flaw in SAP Commerce Cloud, CVE-2026-58231, is under active exploitation days after patching.

The Hacker NewsAug 17, 17:57 UTC · Aug 17, 2026Exploit / PoCExploitedCVE-2026-58231 CVE-2025-313243 · 3 reads

SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code

SAP patched a CVSS 10.0 unauthenticated RCE flaw (CVE-2026-58231) in Commerce Cloud's Data Hub Adapter, plus three critical flaws in NetWeaver and Manufacturing.

The Hacker NewsAug 12, 07:31 UTC · Aug 12, 2026VulnerabilityCVE-2026-58231 CVE-2026-44772 CVE-2026-34265+11 · 1 read

Related CVEs

by mentions

CVE-2026-44756<1%10.0
Unauthenticated buffer overflow in SAP Kernel Extended Passport (EPP) processing
published Sep 8, 2026SAP Kernel (Extended Passport Protocol (EPP) processing library)
CVE-2026-58231<1%10.0
Unauthenticated Code Injection RCE in SAP Commerce Cloud
published Aug 11, 2026SAP Commerce CloudPoC
CVE-2026-58240<1%9.8
Unauthenticated Component Registration Flaw in SAP NetWeaver Message Server
published Sep 8, 2026SAP NetWeaver Message Server
CVE-2026-76969<1%9.4
Unauthenticated Credential Theft and Tenant Data Tampering in SAP @sap/cds-mtxs
published Sep 8, 2026SAP @sap/cds-mtxs npm library (CAP multitenancy service; exploitable when used in multitenant CAP applications with extensib
CVE-2026-66768<1%9.0
Trust Level Policy Bypass Enables RCE in SAP GUI for Java
published Sep 8, 2026SAP GUI for Java
CVE-2025-3132499%9.8
Unauthenticated File Upload RCE in SAP NetWeaver Visual Composer
published Apr 24, 2025sap netweaverKEVRansomwarePoC
CVE-2026-34265<1%9.8
SAP NetWeaver Application Server ABAP allows an unauthenticated attacker to exploit logical errors in DIAG protocol parsing, resulting in memory corruption
published Aug 11, 2026
CVE-2026-44758<1%9.1
SAP Manufacturing Integration and Intelligence (MII) allows an attacker with high privileges to submit specially crafted input to certain affected…
published Aug 11, 2026
CVE-2026-15316<1%7.1
Unauthenticated Input Validation DoS in TP-Link Tapo C200 v5 Configuration Service
published Aug 18, 2026TP-Link Tapo C200 firmware
CVE-2026-44772—
published —

Appears with

SAPvendor · 6
SAP NetWeaverproduct · 4
SAPorganization · 3
SAP S/4HANAproduct · 3
SAP Commerce Cloudproduct · 2
Onapsisvendor · 2
PhantomRaventhreat actor · 1
SecurityWeekvendor · 1
Nefilimmalware · 1
Black Axethreat actor · 1
Tapo C200product · 1
NISTvendor · 1
SAP BW/4HANAproduct · 1
Lockergogamalware · 1
WooCommerce Wholesale Lead Captureproduct · 1
Stadler Railvictim · 1

Entities are extracted by the model from each article. First seen Aug 12, 2026, last mentioned Sep 18, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.