60
30
47
30
47
55
42
42
30
30
60
42
Containers on fire: from container escapes to supply chain attacks
60
47
55
60
55
42
30
30
30
42
55
2026-011: Critical Vulnerabilities in SAP Kernel and NetWeaver Message Server
SAP patched two critical flaws, OVERPASS (CVE-2026-44756, CVSS 10.0) and S4GET (CVE-2026-58240), allowing unauthenticated attackers to execute OS commands on SAP hosts.
On SAP's September 2026 Security Patch Day, SAP released Security Notes 3747649 and 3759472 fixing two critical unauthenticated remote vulnerabilities found by Onapsis. CVE-2026-44756 ('OVERPASS', CVSS 10.0) is a memory corruption flaw in Extended Passport (EPP) deserialisation in the SAP Kernel; CVE-2026-58240 ('S4GET', CVSS 9.8) is a missing authentication check in the NetWeaver Message Server that lets attackers register as trusted cluster nodes. Successful exploitation of either can yield OS command execution as the SAP service account, leading to full system and business data compromise, and CERT-EU urges immediate patching. No in-the-wild exploitation is reported.
75
35
30
47
"Patched" but still exposed: US federal agencies must remediate Cisco flaws (again)
60
30
Microsoft Patch Tuesday, September 2025 Edition
60
60
30
55
Operation Triangulation: The last (hardware) mystery
60
35
30
35
35
Microsoft Issues Patches for 90 Flaws, Including 10 Critical Zero
60
CISA Adds Another 95 Flaws to its Actively Exploited Vulnerabilities Catalog
60