SAP S/4HANA

Search everything

Mentions · 7d0
Mentions · 30d1
All mentions7
First seenSep 8, 2026
Last mentioned17d ago

Timeline

7 articles · newest first

SAP security advisory – October 2026 monthly rollup (AV26-1030)

Canadian Cyber Centre urges patching after SAP's October 2026 rollup affects multiple products.

Canadian Centre for Cyber SecurityOct 13, 13:27 UTC · 17d agoAdvisory1

SAP Patches Maximum Severity “Overpass” Flaw

Onapsis warns over 10,000 internet-facing SAP systems may be exposed to maximum-severity unauthenticated RCE flaw CVE-2026-44756 in SAP Extended Passport.

Infosecurity MagazineSep 9, 08:15 UTC · Sep 9, 2026VulnerabilityCVE-2026-44756 CVE-2026-58240 CVE-2026-76969+11 · 1 read

SAP Patches CVSS 10.0 Kernel Flaw Enabling Unauthenticated Remote Code Execution

SAP patched CVE-2026-44756 (CVSS 10.0), an unauthenticated kernel memory corruption allowing OS command execution, plus three other critical flaws.

The Hacker NewsSep 9, 06:25 UTC · Sep 9, 2026VulnerabilityCVE-2026-44756 CVE-2026-58240 CVE-2026-76969+12

September 2026 Patch Tuesday roundup: Plugs for two zero day holes among almost 1,000 fixes in Windows

Microsoft's September 2026 Patch Tuesday ships 964 fixes including two exploited Windows zero-days (CVE-2026-85880, CVE-2026-81963) and a wormable DNS RCE.

CSO OnlineSep 9, 03:27 UTC · Sep 9, 2026VulnerabilityExploitedCVE-2026-85880 CVE-2026-81963 CVE-2026-69730+27 · 3 reads

SAP warns of maximum severity 'OVERPASS' kernel vulnerability

SAP's September 2026 patches fix maximum-severity kernel flaw CVE-2026-44756 (OVERPASS), letting unauthenticated attackers execute commands on 10,000+ internet-facing SAP systems.

BleepingComputerSep 8, 14:55 UTC · Sep 8, 2026Vulnerability 2 sourcesCVE-2026-44756 CVE-2026-58240 CVE-2026-582311

SAP Patches Critical Extended Passport Processing Vulnerability

SAP patches CVSS 10.0 flaw CVE-2026-44756 (OVERPASS) enabling unauthenticated RCE in S/4HANA and NetWeaver, plus three other criticals; no in-the-wild exploitation reported.

SecurityWeekSep 8, 14:55 UTC · Sep 8, 2026Vulnerability 2 sourcesCVE-2026-44756 CVE-2026-58240 CVE-2026-76969+12

SAP Security Updates September 2026 – Critical Flaws Patched in SAP NetWeaver, Cloud and Extended Passport

SAP's September 2026 Patch Day fixes 19 notes including CVE-2026-44756 (CVSS 10.0), unauthenticated memory corruption in SAP Extended Passport Processing kernels.

Cyber Security NewsSep 8, 11:19 UTC · Sep 8, 2026VulnerabilityCVE-2026-44756 CVE-2026-58240 CVE-2026-76969+173 · 2 reads

Related CVEs

by mentions

CVE-2026-44756<1%10.0
Unauthenticated buffer overflow in SAP Kernel Extended Passport (EPP) processing
published Sep 8, 2026SAP Kernel (Extended Passport Protocol (EPP) processing library)
CVE-2026-58240<1%9.8
Unauthenticated Component Registration Flaw in SAP NetWeaver Message Server
published Sep 8, 2026SAP NetWeaver Message Server
CVE-2026-76969<1%9.4
Unauthenticated Credential Theft and Tenant Data Tampering in SAP @sap/cds-mtxs
published Sep 8, 2026SAP @sap/cds-mtxs npm library (CAP multitenancy service; exploitable when used in multitenant CAP applications with extensib
CVE-2026-66768<1%9.0
Trust Level Policy Bypass Enables RCE in SAP GUI for Java
published Sep 8, 2026SAP GUI for Java
CVE-2026-76958<1%8.5
XXE Injection in SAP Integration Suite Allows Sensitive File Read via Logs
published Sep 8, 2026SAP Integration Suite (certain internal components that accept XML documents from untrusted sources)
CVE-2026-76971<1%6.5
Authenticated SSRF in SAP Manufacturing Integration and Intelligence (MII)
published Sep 8, 2026SAP Manufacturing Integration and Intelligence (MII)
CVE-2026-76968<1%6.5
Authenticated Information Disclosure in SAP Web Dispatcher, ICM and Content Server
published Sep 8, 2026SAP Web Dispatcher
CVE-2026-44766<1%6.5
Authenticated SQL Injection in SAP S/4HANA Intercompany Matching and Reconciliation
published Sep 8, 2026SAP S/4HANA — Intercompany Matching and Reconciliation (IMR) component
CVE-2026-34477<1%6.3
The fix for CVE-2025-68161 https://logging.apache.org/security.html#CVE-2025-68161 was incomplete
published Apr 10, 2026apache log4j
CVE-2026-76963<1%4.3
Missing authorization check in SAP NetWeaver AS ABAP exposes system configuration data
published Sep 8, 2026SAP NetWeaver Application Server ABAP

Appears with

SAPvendor · 7
SAP NetWeaverproduct · 7
Onapsisorganization · 3
Onapsisvendor · 3
SAP Web Dispatcherproduct · 3
SAP GUI for Javaproduct · 2
SAP Commerce Cloudproduct · 2
SAP Cloud Application Programming Modelproduct · 2
Tenablevendor · 1
SAP NetWeaver Visual Composerproduct · 1
Action1vendor · 1
SAPorganization · 1
Zero Day Initiativevendor · 1
SAP Kernelproduct · 1
Copilot Studioproduct · 1
SAP Manufacturing Integration and Intelligenceproduct · 1

Entities are extracted by the model from each article. First seen Sep 8, 2026, last mentioned 17d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.