Microsoft's July Update Patches 143 Flaws, Including Two Actively Exploited
60
Search: “Check Point Security Management Server”
301 stories
42
SAP Patches Critical Extended Passport Processing Vulnerability
SAP patches CVSS 10.0 flaw CVE-2026-44756 (OVERPASS) enabling unauthenticated RCE in S/4HANA and NetWeaver, plus three other criticals; no in-the-wild exploitation reported.
CVE-2026-44756 is a CVSS 10.0 memory corruption flaw in Extended Passport (EPP) deserialization, triggered when a user session opens across web, SAP GUI, and RFC vectors. Exploitation yields command execution as the SAP OS account, database credential and password hash recovery, session reading, and data or binary modification; affected products include S/4HANA, ERP/ECC, NetWeaver, Web Dispatcher, and BW/4HANA. Three other criticals were patched: CVE-2026-58240 (S4GET, missing authentication affecting all S/4HANA 2025 and earlier releases), CVE-2026-76969 (CAP credential disclosure), and CVE-2026-66768 (NetWeaver access control). Onapsis and SAP report no indicators of in-the-wild exploitation.
80
47
30
March 2020 Patch Tuesday: Microsoft fixes 115 vulnerabilities, Adobe none
60
30
Week in review: High severity WordPress vulnerabilities, fake OAuth IDs bypass sign-in logs
60
47
47
55
30
30
Week in review: KeePass vulnerability, Apple fixes exploited WebKit 0-days
60
55
60
55
60
April 2020 Patch Tuesday: Microsoft fixes three actively exploited vulnerabilities
60
55
30
30
Week in review: High-severity LPE vulnerability in the Linux kernel, cPanel 0-day exploited for months
60
Week in review: 74k Fortinet firewall credentials stolen, Splunk Enterprise RCE under active attack
60
47
60
60
March 2019 Patch Tuesday: Microsoft patches two actively exploited Windows flaws
60
⚡ Weekly Recap: Drift Breach Chaos, Zero-Days Active, Patch Warnings, Smarter Threats & More
60
47
55
55
60
47
60
47
47
Microsoft Patches 67 Vulnerabilities Including WEBDAV Zero
60
55
30