SAP Gateway

Search everything

Mentions · 7d6
Mentions · 30d6
All mentions6
First seenNov 10, 2026
Last mentioned8h ago

Timeline

6 articles · newest first

SAP patches CVSS 10.0 PROXYGATE and ICM2SHELL flaws

Onapsis found no exploitation; network attackers can run commands as the SAP installation owner, <sid>adm.

Cyber Security NewsNov 10, 17:32 UTC · 8h agoVulnerability 4 sourcesCVE-2026-89103 CVE-2026-76964 CVE-2026-891261

SAP patches critical ICM2SHELL and ProxyGate kernel flaws

Onapsis gave SAP a working unauthenticated exploit for ICM2SHELL; the November notes also cover ProxyGate and a SAML impersonation bug.

SecurityWeekNov 10, 14:46 UTC · 11h agoVulnerabilityCVE-2026-76964 CVE-2026-89126 CVE-2026-89103+6

SAP patches four CVSS 10 flaws in NetWeaver, Gateway and Web Dispatcher

Onapsis names the memory-corruption bugs ICM2SHELL and the Gateway pre-auth issue PROXYGATE; attacks on these four are not reported.

BleepingComputerupdated Nov 10, 17:32 UTC · 8h agofirst Nov 10, 12:07 UTC · 13h agoVulnerability 4 sourcesCVE-2026-76964 CVE-2026-120017 CVE-2026-89103+11

SAP November 2026 notes fix four CVSS 10.0 unauthenticated flaws

The bulletin lists 35 new notes and does not report active exploitation of the patched issues.

GBHackersNov 10, 12:01 UTC · 13h agoVulnerabilityCVE-2026-76964 CVE-2026-89126 CVE-2026-89103+19

SAP November patch day fixes four CVSS 10.0 flaws

Unauthenticated memory corruption in ICM and Web Dispatcher may allow code execution; exploitation is not discussed.

Cyber Security NewsNov 10, 11:10 UTC · 14h agoVulnerabilityCVE-2026-76964 CVE-2026-89126 CVE-2026-89103+27

SAP patches four CVSS 10.0 flaws, including unauthenticated RCE

The November fixes cover NetWeaver ICM, Web Dispatcher, Gateway, and SAML, and none require user interaction.

The Hacker Newsupdated Nov 10, 17:32 UTC · 8h agofirst Nov 10, 10:02 UTC · 15h agoVulnerability 4 sourcesCVE-2026-76964 CVE-2026-89126 CVE-2026-89103+1

Related CVEs

by mentions

CVE-2026-7696410.0
Unauthenticated memory corruption RCE in SAP NetWeaver AS ABAP
published 1d agoSAP NetWeaver Application Server ABAP
CVE-2026-8912610.0
Unauthenticated memory corruption in SAP Web Dispatcher
published 1d agoSAP Web Dispatcher
CVE-2026-8910310.0
Incorrect authorization via SAP Gateway default ACL
published 1d agoSAP Gateway
CVE-2026-12001710.0
Authentication bypass in SAP NetWeaver AS ABAP under some configs
published 1d agoSAP NetWeaver AS ABAP
CVE-2026-1098039.9
Authenticated code injection via XSL in SAP NetWeaver KM
published 1d agoSAP NetWeaver Knowledge Management (XML Forms)
CVE-2026-769659.9
Missing auth check allows OS command execution in SAP NetWeaver ABAP
published 1d agoSAP NetWeaver Application Server ABAP and ABAP Platform
CVE-2026-1097959.9
Code injection in SAP NetWeaver remote functionality
published 1d agoSAP NetWeaver
CVE-2026-891199.6
CSRF in SAP Web Dispatcher and NetWeaver ICM admin functions
published 1d agoSAP Web Dispatcher
CVE-2026-1097989.1
Authenticated XXE in SAP BusinessObjects Web Intelligence
published 1d agoSAP BusinessObjects Business Intelligence Platform (Web Intelligence)
CVE-2026-769707.5
Memory corruption DoS in SAP NetWeaver ABAP
published 1d agoSAP Application Server ABAP for SAP NetWeaver

Appears with

SAPvendor · 6
SAP Web Dispatcherproduct · 5
NetWeaverproduct · 3
Internet Communication Managerproduct · 2
Onapsisorganization · 2
SAP NetWeaverproduct · 2
BusinessObjectsproduct · 2
Web Dispatcherproduct · 1
SAP Cloud SDK for Pythonproduct · 1
SAP Cloud SDKproduct · 1
S4CRMproduct · 1
Onapsis Research Labsorganization · 1
RedRaysorganization · 1
SAP HANA XSproduct · 1

Entities are extracted by the model from each article. First seen Nov 10, 2026, last mentioned 8h ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.