S/4HANA

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenSep 8, 2026
Last mentionedSep 18, 2026

Timeline

2 articles · newest first

In Other News: Ransomware Developer Sentenced, Plugin4Shell AI Attack, Critical SAP Flaw

SecurityWeek roundup: ransomware developer sentenced, critical SAP flaw CVE-2026-44756, PhantomRaven npm info-stealer, WordPress mass exploitation, and AI agent security findings.

SecurityWeekSep 18, 14:25 UTC · Sep 18, 2026IndustryExploitedCVE-2026-44756 CVE-2026-15315 CVE-2026-153164

SAP September 2026 Security Update Fixes 4 Critical Vulnerabilities and 15 Other Flaws

SAP's September 2026 Patch Tuesday ships 19 security notes, including four criticals led by a CVSS 10.0 memory-corruption flaw in Extended Passport Processing.

GBHackersSep 8, 10:24 UTC · Sep 8, 2026VulnerabilityCVE-2026-44756 CVE-2026-58240 CVE-2026-76969+84 · 2 reads

Related CVEs

by mentions

CVE-2026-44756<1%10.0
Unauthenticated buffer overflow in SAP Kernel Extended Passport (EPP) processing
published Sep 8, 2026SAP Kernel (Extended Passport Protocol (EPP) processing library)
CVE-2026-58240<1%9.8
Unauthenticated Component Registration Flaw in SAP NetWeaver Message Server
published Sep 8, 2026SAP NetWeaver Message Server
CVE-2026-23321%9.1
In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used, similar to the "funky chunks" techniques outlined here
published Apr 14, 2026eclipse jettyPoC
CVE-2026-66768<1%9.0
Trust Level Policy Bypass Enables RCE in SAP GUI for Java
published Sep 8, 2026SAP GUI for Java
CVE-2026-58243<1%8.8
SAP ABAP Development Tools does not perform necessary authorization checks for certain functionality, allowing an attacker with low privileges to execute…
published Aug 11, 2026
CVE-2026-15315<1%8.7
Authentication Bypass via Challenge Validation Flaw in TP-Link Tapo C120/C200 Cameras
published Aug 18, 2026tp-link tapo c120 firmwarePoC
CVE-2026-76958<1%8.5
XXE Injection in SAP Integration Suite Allows Sensitive File Read via Logs
published Sep 8, 2026SAP Integration Suite (certain internal components that accept XML documents from untrusted sources)
CVE-2026-15316<1%7.1
Unauthenticated Input Validation DoS in TP-Link Tapo C200 v5 Configuration Service
published Aug 18, 2026TP-Link Tapo C200 firmware
CVE-2026-44766<1%6.5
Authenticated SQL Injection in SAP S/4HANA Intercompany Matching and Reconciliation
published Sep 8, 2026SAP S/4HANA — Intercompany Matching and Reconciliation (IMR) component
CVE-2026-76968<1%6.5
Authenticated Information Disclosure in SAP Web Dispatcher, ICM and Content Server
published Sep 8, 2026SAP Web Dispatcher

Appears with

SAPvendor · 2
NetWeaver Business Clientproduct · 1
SAP GUI for Javaproduct · 1
Onapsisorganization · 1
Nefilimmalware · 1
NetWeaverproduct · 1
Black Axethreat actor · 1
Tapo C200product · 1
NISTvendor · 1
SAP Integration Suiteproduct · 1
MegaCortexmalware · 1
Lockergogamalware · 1
SAP Kernelproduct · 1
SAP Web Dispatcherproduct · 1
TP-Linkvendor · 1
NetWeaver AS for ABAPproduct · 1

Entities are extracted by the model from each article. First seen Sep 8, 2026, last mentioned Sep 18, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.