SAP NetWeaver Message Server

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenSep 9, 2026
Last mentionedSep 9, 2026

Timeline

2 articles · newest first

SAP Patches CVSS 10.0 Kernel Flaw Enabling Unauthenticated Remote Code Execution

SAP patched CVE-2026-44756 (CVSS 10.0), an unauthenticated kernel memory corruption allowing OS command execution, plus three other critical flaws.

The Hacker NewsSep 9, 06:25 UTC · Sep 9, 2026VulnerabilityCVE-2026-44756 CVE-2026-58240 CVE-2026-76969+12

2026-011: Critical Vulnerabilities in SAP Kernel and NetWeaver Message Server

SAP patched two critical flaws, OVERPASS (CVE-2026-44756, CVSS 10.0) and S4GET (CVE-2026-58240), allowing unauthenticated attackers to execute OS commands on SAP hosts.

CERT-EU AdvisoriesSep 9, 00:00 UTC · Sep 9, 2026VulnerabilityCVE-2026-44756 CVE-2026-582404 · 1 read

Related CVEs

by mentions

CVE-2026-44756<1%10.0
Unauthenticated buffer overflow in SAP Kernel Extended Passport (EPP) processing
published Sep 8, 2026SAP Kernel (Extended Passport Protocol (EPP) processing library)
CVE-2026-58240<1%9.8
Unauthenticated Component Registration Flaw in SAP NetWeaver Message Server
published Sep 8, 2026SAP NetWeaver Message Server
CVE-2026-76969<1%9.4
Unauthenticated Credential Theft and Tenant Data Tampering in SAP @sap/cds-mtxs
published Sep 8, 2026SAP @sap/cds-mtxs npm library (CAP multitenancy service; exploitable when used in multitenant CAP applications with extensib
CVE-2026-66768<1%9.0
Trust Level Policy Bypass Enables RCE in SAP GUI for Java
published Sep 8, 2026SAP GUI for Java

Appears with

Onapsisvendor · 2
SAPvendor · 2
Onapsis Research Labsorganization · 1
SAP S/4HANAproduct · 1
SAP GUI for Javaproduct · 1
SAP NetWeaverproduct · 1
SAP Cloud Application Programming Modelproduct · 1
CERT-EUorganization · 1
SAP Kernelproduct · 1
CERT-EUvendor · 1
SAP Web Dispatcherproduct · 1

Entities are extracted by the model from each article. First seen Sep 9, 2026, last mentioned Sep 9, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.