SAP

Search everything

Mentions · 7d0
Mentions · 30d11
All mentions31
First seenAug 12, 2026
Last mentioned14d ago

Timeline

31 articles · newest first

Hackers Exploit D-Link, Ubiquiti and SAP Flaws to Hijack Devices for Proxy Networks

Actor skynox7 exploited D-Link, Ubiquiti, and SAP flaws to proxyjack 143 devices.

Cyber Security NewsOct 16, 09:02 UTC · 14d agoExploit / PoCExploitedCVE-2021-44228 CVE-2024-3272 CVE-2024-3273+14

New Proxyjacking Campaign Exploits Network Device Flaws to Build Stealthy Proxy Infrastructure

GreyNoise says attackers exploited NAS, NVR, and SAP flaws to install Pawns.app on 143 devices.

GBHackersOct 16, 05:54 UTC · 15d agoExploit / PoCExploitedCVE-2021-44228 CVE-2024-3272 CVE-2024-3273+13 · 2 reads

Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth

GreyNoise found attackers exploiting edge-device flaws in 34 countries to install Pawns.app and resell bandwidth.

BleepingComputerOct 15, 18:20 UTC · 15d agoMalwareExploitedCVE-2024-3272 CVE-2024-3273 CVE-2021-44228+14 · 1 read

skynox7: Proxyjacking Edge Devices Into Residential Proxies

An actor exploited edge-device flaws to install Pawns.app, compromising at least 143 devices in 34 countries.

GreyNoiseOct 15, 00:00 UTC · 16d agoExploit / PoCExploitedCVE-2024-3272 CVE-2024-3273 CVE-2021-44228+18 · 5 reads

CVE-2026-89111: Critical SAP Cloud SDK SSRF

SAP disclosed CVE-2026-89111, a CVSS 10 SSRF in SAP Cloud SDK for Python that can leak OAuth2 secrets.

SOCRadarOct 14, 14:03 UTC · 16d agoVulnerabilityCVE-2026-891112 · 1 read

SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft

SAP's Python Cloud SDK can leak OAuth2 client secrets through tenant-subdomain SSRF, tracked as CVSS 10.0 CVE-2026-89111.

The Hacker NewsOct 13, 17:28 UTC · 17d agoVulnerabilityCVE-2026-891114 · 1 read

SAP security advisory – October 2026 monthly rollup (AV26-1030)

Canadian Cyber Centre urges patching after SAP's October 2026 rollup affects multiple products.

Canadian Centre for Cyber SecurityOct 13, 13:27 UTC · 17d agoAdvisory1

Hackers target two South Korean megachurches, potentially exposing congregant data

Hackers breached two South Korean megachurches, potentially exposing personal and financial data of hundreds of thousands of members.

The RecordOct 8, 13:55 UTC · 22d agoData breachExploited1 · 1 read

Hackers Breach Two Major South Korean Churches, Exposing Data of Over 1 Million People

Attackers breached two South Korean churches, exposing roughly one million congregant records and financial data.

Cyber Security NewsOct 7, 14:13 UTC · 23d agoData breachExploited2 sources2 · 1 read

Hackers Use ERP Web Shell and IDOR Flaws to Breach Major South Korean Churches

Attackers breached two major South Korean churches with ERP web shells and IDOR flaws, exposing hundreds of thousands of records.

GBHackersupdated Oct 7, 14:13 UTC · 23d agofirst Oct 7, 11:24 UTC · 23d agoData breachExploited2 sources4 · 1 read

11 Best CIAM Solutions Compared (2026): Features & Pricing

A 2026 buyer guide ranks Auth0 the best overall CIAM and Cognito plus Entra External ID the cheapest.

GBHackersOct 5, 07:35 UTC · 26d agoIndustry6 · 3 reads

Supply Chain Attacks Turn Developer Machines Into Gateways for Cloud Breaches

Qualys says supply-chain malware on developer machines is stealing cloud credentials and enabling downstream breaches.

Cyber Security NewsSep 30, 15:02 UTC · Sep 30, 2026MalwareExploited1 · 1 read

Nvidia Unveils AI Agent Safety Platform With Hardware-Based Watchdog

Nvidia launched an agent safety platform pairing OpenShell sandboxing with a BlueField-4 hardware watchdog.

SecurityWeekSep 28, 10:27 UTC · Sep 28, 2026AI safety & security2 · 2 reads

Synthesis Through Simulation: Generating Coherent Enterprise Data via Scalable Agent-System Interaction

SAP's STS generates valid enterprise data by having LLM agents call policy-enforcing simulated APIs.

Hugging Face daily papersSep 23, 20:00 UTC · Sep 23, 2026AI research1 · 1 read

CVE-2026-44756: Pre-Auth RCE in SAP EPP Processing (ICM, Web Dispatcher, disp+work)

nullFaktor disclosed pre-authentication remote code execution in SAP EPP processing, tracked as critical CVE-2026-44756.

Full DisclosureSep 22, 18:31 UTC · Sep 22, 2026VulnerabilityCVE-2026-447562 · 1 read

Top 10 Best Customer Identity & Access Management (CIAM) Solutions in 2026 [Ranked & Scored]

A 2026 ranking scores ten CIAM platforms, placing Okta Auth0 first ahead of Microsoft Entra External ID and Ping.

Cyber Security NewsSep 22, 07:53 UTC · Sep 22, 2026Industry3 · 3 reads

Know what was tested before your SAP ECC migration goes live

Companies delay SAP ECC migration to 2030 due to fear of disruption, missing strategic advantages of early adoption.

Help Net SecuritySep 21, 06:00 UTC · Sep 21, 2026Industry1 · 1 read

In Other News: Ransomware Developer Sentenced, Plugin4Shell AI Attack, Critical SAP Flaw

SecurityWeek roundup: ransomware developer sentenced, critical SAP flaw CVE-2026-44756, PhantomRaven npm info-stealer, WordPress mass exploitation, and AI agent security findings.

SecurityWeekSep 18, 14:25 UTC · Sep 18, 2026IndustryExploitedCVE-2026-44756 CVE-2026-15315 CVE-2026-153164

SAP Patches Maximum Severity “Overpass” Flaw

Onapsis warns over 10,000 internet-facing SAP systems may be exposed to maximum-severity unauthenticated RCE flaw CVE-2026-44756 in SAP Extended Passport.

Infosecurity MagazineSep 9, 08:15 UTC · Sep 9, 2026VulnerabilityCVE-2026-44756 CVE-2026-58240 CVE-2026-76969+11 · 1 read

SAP Patches CVSS 10.0 Kernel Flaw Enabling Unauthenticated Remote Code Execution

SAP patched CVE-2026-44756 (CVSS 10.0), an unauthenticated kernel memory corruption allowing OS command execution, plus three other critical flaws.

The Hacker NewsSep 9, 06:25 UTC · Sep 9, 2026VulnerabilityCVE-2026-44756 CVE-2026-58240 CVE-2026-76969+12

September 2026 Patch Tuesday roundup: Plugs for two zero day holes among almost 1,000 fixes in Windows

Microsoft's September 2026 Patch Tuesday ships 964 fixes including two exploited Windows zero-days (CVE-2026-85880, CVE-2026-81963) and a wormable DNS RCE.

CSO OnlineSep 9, 03:27 UTC · Sep 9, 2026VulnerabilityExploitedCVE-2026-85880 CVE-2026-81963 CVE-2026-69730+27 · 3 reads

2026-011: Critical Vulnerabilities in SAP Kernel and NetWeaver Message Server

SAP patched two critical flaws, OVERPASS (CVE-2026-44756, CVSS 10.0) and S4GET (CVE-2026-58240), allowing unauthenticated attackers to execute OS commands on SAP hosts.

CERT-EU AdvisoriesSep 9, 00:00 UTC · Sep 9, 2026VulnerabilityCVE-2026-44756 CVE-2026-582404 · 1 read

SAP security advisory – September 2026 monthly rollup (AV26-894)

Canada's Cyber Centre relayed SAP's September 2026 Patch Day rollup covering vulnerabilities across NetWeaver, kernel components, CAP, and Integration Suite.

Canadian Centre for Cyber SecuritySep 8, 18:03 UTC · Sep 8, 2026Advisory2 · 1 read

SAP warns of maximum severity 'OVERPASS' kernel vulnerability

SAP's September 2026 patches fix maximum-severity kernel flaw CVE-2026-44756 (OVERPASS), letting unauthenticated attackers execute commands on 10,000+ internet-facing SAP systems.

BleepingComputerSep 8, 14:55 UTC · Sep 8, 2026Vulnerability 2 sourcesCVE-2026-44756 CVE-2026-58240 CVE-2026-582311

SAP Patches Critical Extended Passport Processing Vulnerability

SAP patches CVSS 10.0 flaw CVE-2026-44756 (OVERPASS) enabling unauthenticated RCE in S/4HANA and NetWeaver, plus three other criticals; no in-the-wild exploitation reported.

SecurityWeekSep 8, 14:55 UTC · Sep 8, 2026Vulnerability 2 sourcesCVE-2026-44756 CVE-2026-58240 CVE-2026-76969+12

SAP Security Updates September 2026 – Critical Flaws Patched in SAP NetWeaver, Cloud and Extended Passport

SAP's September 2026 Patch Day fixes 19 notes including CVE-2026-44756 (CVSS 10.0), unauthenticated memory corruption in SAP Extended Passport Processing kernels.

Cyber Security NewsSep 8, 11:19 UTC · Sep 8, 2026VulnerabilityCVE-2026-44756 CVE-2026-58240 CVE-2026-76969+173 · 2 reads

SAP September 2026 Security Update Fixes 4 Critical Vulnerabilities and 15 Other Flaws

SAP's September 2026 Patch Tuesday ships 19 security notes, including four criticals led by a CVSS 10.0 memory-corruption flaw in Extended Passport Processing.

GBHackersSep 8, 10:24 UTC · Sep 8, 2026VulnerabilityCVE-2026-44756 CVE-2026-58240 CVE-2026-76969+84 · 2 reads

Facilitating AI integration with simplicity at scale

Jabil's SAP IT director says simplifying integration across 100+ sites in 30+ countries with SAP Integration Suite created the data backbone for AI.

MIT Technology Review · AISep 2, 14:00 UTC · Sep 2, 2026AI industry4 · 1 read

SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch

A maximum-severity (CVSS 10.0) unauthenticated RCE flaw in SAP Commerce Cloud, CVE-2026-58231, is under active exploitation days after patching.

The Hacker NewsAug 17, 17:57 UTC · Aug 17, 2026Exploit / PoCExploitedCVE-2026-58231 CVE-2025-313243 · 3 reads

SAP Commerce Cloud CVE-2026

Attackers actively exploit unauthenticated RCE CVE-2026-58231 (CVSS 10.0) in SAP Commerce Cloud days after patch release.

Security AffairsAug 15, 17:14 UTC · Aug 15, 2026Exploit / PoCExploitedCVE-2026-582312 · 1 read

SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code

SAP patched a CVSS 10.0 unauthenticated RCE flaw (CVE-2026-58231) in Commerce Cloud's Data Hub Adapter, plus three critical flaws in NetWeaver and Manufacturing.

The Hacker NewsAug 12, 07:31 UTC · Aug 12, 2026VulnerabilityCVE-2026-58231 CVE-2026-44772 CVE-2026-34265+11 · 1 read

Related CVEs

by mentions

CVE-2026-44756<1%10.0
Unauthenticated buffer overflow in SAP Kernel Extended Passport (EPP) processing
published Sep 8, 2026SAP Kernel (Extended Passport Protocol (EPP) processing library)
CVE-2026-58240<1%9.8
Unauthenticated Component Registration Flaw in SAP NetWeaver Message Server
published Sep 8, 2026SAP NetWeaver Message Server
CVE-2025-3132499%9.8
Unauthenticated File Upload RCE in SAP NetWeaver Visual Composer
published Apr 24, 2025sap netweaverKEVRansomwarePoC
CVE-2026-76969<1%9.4
Unauthenticated Credential Theft and Tenant Data Tampering in SAP @sap/cds-mtxs
published Sep 8, 2026SAP @sap/cds-mtxs npm library (CAP multitenancy service; exploitable when used in multitenant CAP applications with extensib
CVE-2026-66768<1%9.0
Trust Level Policy Bypass Enables RCE in SAP GUI for Java
published Sep 8, 2026SAP GUI for Java
CVE-2021-44228100%10.0
JNDI Injection Remote Code Execution in Apache Log4j2 (Log4Shell)
published Dec 10, 2021Apache Log4j2KEVRansomwarePoC ×9
CVE-2024-327298%9.8
Hard-Coded Backdoor Credentials in End-of-Life D-Link NAS Devices
published Apr 4, 2024D-Link DNS-320LKEVPoC
CVE-2024-3273100%9.8
Command Injection in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L NAS Devices
published Apr 4, 2024D-Link DNS-320L NASKEVPoC
CVE-2026-58231<1%10.0
Unauthenticated Code Injection RCE in SAP Commerce Cloud
published Aug 11, 2026SAP Commerce CloudPoC
CVE-2026-76968<1%6.5
Authenticated Information Disclosure in SAP Web Dispatcher, ICM and Content Server
published Sep 8, 2026SAP Web Dispatcher

Appears with

SAP NetWeaverproduct · 9
SAP S/4HANAproduct · 7
SAP Commerce Cloudproduct · 6
Onapsisorganization · 6
SAP Web Dispatcherproduct · 6
SAPorganization · 6
Microsoftvendor · 5
SAP NetWeaver Visual Composerproduct · 5
Onapsisvendor · 5
SAP Cloud Application Programming Modelproduct · 4
Pawns.appproduct · 4
D-Linkvendor · 4
SAP Integration Suiteproduct · 4
GreyNoiseorganization · 4
Ubiquitivendor · 4
D-Link ShareCenterproduct · 4

Entities are extracted by the model from each article. First seen Aug 12, 2026, last mentioned 14d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.