S4CRM

Mentions · 7d1
Mentions · 30d1
All mentions1
First seenNov 10, 2026
Last mentioned12h ago

Timeline

1 articles · newest first

SAP patches critical ICM2SHELL and ProxyGate kernel flaws

Onapsis gave SAP a working unauthenticated exploit for ICM2SHELL; the November notes also cover ProxyGate and a SAML impersonation bug.

SecurityWeekNov 10, 14:46 UTC · 12h agoVulnerabilityCVE-2026-76964 CVE-2026-89126 CVE-2026-89103+6

Related CVEs

by mentions

CVE-2026-8910310.0
Incorrect authorization via SAP Gateway default ACL
published 1d agoSAP Gateway
CVE-2026-8912610.0
Unauthenticated memory corruption in SAP Web Dispatcher
published 1d agoSAP Web Dispatcher
CVE-2026-7696410.0
Unauthenticated memory corruption RCE in SAP NetWeaver AS ABAP
published 1d agoSAP NetWeaver Application Server ABAP
CVE-2026-12001710.0
Authentication bypass in SAP NetWeaver AS ABAP under some configs
published 1d agoSAP NetWeaver AS ABAP
CVE-2026-1097959.9
Code injection in SAP NetWeaver remote functionality
published 1d agoSAP NetWeaver
CVE-2026-1098039.9
Authenticated code injection via XSL in SAP NetWeaver KM
published 1d agoSAP NetWeaver Knowledge Management (XML Forms)
CVE-2026-769659.9
Missing auth check allows OS command execution in SAP NetWeaver ABAP
published 1d agoSAP NetWeaver Application Server ABAP and ABAP Platform
CVE-2026-891199.6
CSRF in SAP Web Dispatcher and NetWeaver ICM admin functions
published 1d agoSAP Web Dispatcher
CVE-2026-1097989.1
Authenticated XXE in SAP BusinessObjects Web Intelligence
published 1d agoSAP BusinessObjects Business Intelligence Platform (Web Intelligence)

Appears with

SAPvendor · 1
BusinessObjectsproduct · 1
Onapsisorganization · 1
NetWeaverproduct · 1
Web Dispatcherproduct · 1
SAP Gatewayproduct · 1

Entities are extracted by the model from each article. First seen Nov 10, 2026, last mentioned 12h ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.