Search: “SAP NetWeaver”

117 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 61 Exploit / PoC 26 Ransomware 20 Malware 6 Phishing & fraud 2 Threat actor 2 Advisory 1

SeverityAll critical 103 high 15 medium 0 low 0 info 0

SAP Security Updates September 2026 – Critical Flaws Patched in SAP NetWeaver, Cloud and Extended Passport

SAP's September 2026 Patch Day fixes 19 notes including CVE-2026-44756 (CVSS 10.0), unauthenticated memory corruption in SAP Extended Passport Processing kernels.

SAP shipped 19 new security notes plus one update across NetWeaver, S/4HANA, Integration Suite, Commerce Cloud, and Cloud Application Programming Model. Top issues include CVE-2026-44756 (CVSS 10.0 memory corruption in SAP Extended Passport Processing across many KERNEL and Web Dispatcher versions), CVE-2026-58240 (CVSS 9.8 missing authentication in NetWeaver Message Server), CVE-2026-76969 (CVSS 9.4 credential disclosure in CAP library sap/cds-mtxs), and CVE-2026-66768 (CVSS 9.0 access control flaw in SAP GUI for Java). No exploitation is reported; organizations running affected kernels are urged to patch urgently.

Cyber Security NewsSep 8, 11:19 UTC · 8d agoVulnerability CVE-2026-44756 CVE-2026-58240 CVE-2026-76969+17 CVEs

U.S. CISA adds SAP NetWeaver flaw to its Known Exploited Vulnerabilities catalog

Security AffairsApr 30, 00:05 UTC · Apr 30, 2025Exploit / PoC in the wildCVE-2025-31324 CVE-2017-9844

Critical SAP NetWeaver flaw exploited by suspected initial access broker (CVE-2025-31324)

Help Net SecurityAug 20, 08:46 UTC · Aug 20, 2025Vulnerability in the wildCVE-2025-31324

U.S. CISA adds Google Chromium, DrayTek routers, and SAP NetWeaver flaws to its Known Exploited Vulnerabilities catalog

Security AffairsMay 17, 08:02 UTC · May 17, 2025Exploit / PoC in the wildCVE-2024-12987 CVE-2025-4664 CVE-2025-42999

Experts warn of a second wave of attacks targeting SAP NetWeaver bug CVE-2025

Security AffairsMay 6, 13:55 UTC · May 6, 2025Exploit / PoC in the wildCVE-2025-313241

New Critical SAP NetWeaver Flaw Exploited to Drop Web Shell, Brute Ratel Framework

The Hacker NewsMay 6, 13:53 UTC · May 6, 2025Exploit / PoC in the wildCVE-2017-9844 CVE-2025-31324 CVE-2017-12637

BianLian and RansomExx Exploit SAP NetWeaver Flaw to Deploy PipeMagic Trojan

The Hacker NewsMay 15, 00:00 UTC · May 15, 2025Malware in the wildCVE-2025-31324 CVE-2025-29824 CVE-2025-429991

Exploit for critical SAP Netweaver flaws released (CVE-2025-31324, CVE-2025-42999)

Help Net SecurityAug 20, 00:00 UTC · Aug 20, 2025Vulnerability in the wildCVE-2025-31324 CVE-2025-42999 CVE-2025-30012+4 CVEs

U.S. CISA adds Edimax IC-7100 IP Camera, NAKIVO, and SAP NetWeaver AS Java flaws to its Known Exploited Vulnerabilities catalog

Security AffairsMar 20, 12:18 UTC · Mar 20, 2025Exploit / PoC in the wildCVE-2025-1316 CVE-2024-48248 CVE-2017-12637

Public Exploit Released for Critical SAP NetWeaver Flaw

Infosecurity MagazineAug 19, 16:45 UTC · Aug 19, 2025Ransomware in the wildCVE-2025-31324 CVE-2025-42999

SAP September 2026 Security Update Fixes 4 Critical Vulnerabilities and 15 Other Flaws

SAP's September 2026 Patch Tuesday ships 19 security notes, including four criticals led by a CVSS 10.0 memory-corruption flaw in Extended Passport Processing.

SAP released 19 new Security Notes plus one update, fixing four critical vulnerabilities and 15 additional flaws. The most urgent is CVE-2026-44756 (CVSS 10.0), memory corruption in Extended Passport (EPP) Processing affecting many SAP Kernel and Web Dispatcher releases. Other criticals include CVE-2026-58240 (NetWeaver Message Server missing authentication, 9.8), CVE-2026-76969 (credential disclosure in CAP sap/cds-mtxs, 9.4), and CVE-2026-66768 (improper access control in SAP GUI for Java, 9.0). High-severity fixes cover XXE in Integration Suite Trading Partner Management, deserialization in NetWeaver Business Client, and memory corruption in NetWeaver AS for ABAP.

GBHackersSep 8, 10:24 UTC · 8d agoVulnerability CVE-2026-44756 CVE-2026-58240 CVE-2026-76969+8 CVEs1

SAP April 2019 Security Patch Day addresses High severity flaws in Crystal Reports, NetWeaver

Security AffairsApr 11, 05:28 UTC · Apr 11, 2019Vulnerability CVE-2019-0285 CVE-2019-0283 CVE-2019-0265+5 CVEs

China-Linked APTs Exploit SAP CVE-2025-31324 to Breach 581 Critical Systems Worldwide

The Hacker NewsMay 15, 00:00 UTC · May 15, 2025Vulnerability in the wildCVE-2025-31324 CVE-2025-42999

New SAP NetWeaver Bug Lets Attackers Take Over Servers Without Login

The Hacker NewsOct 15, 00:00 UTC · Oct 15, 2025Exploit / PoC in the wildCVE-2025-42944 CVE-2025-42937 CVE-2025-42910

Week in review: Critical SAP NetWeaver flaw exploited, RSAC 2025 Conference

Help Net SecurityMay 4, 00:00 UTC · May 4, 2025Ransomware in the wildCVE-2025-31324 CVE-2025-3928 CVE-2025-42599+1 CVEs

SAP Flaw Exploited by Ransomware Groups and Chinese

Infosecurity MagazineMay 15, 15:15 UTC · May 15, 2025Ransomware in the wildCVE-2025-31324 CVE-2025-42999

SAP zero-day vulnerability under widespread active exploitation

CyberScoopApr 25, 17:51 UTC · Apr 25, 2025Exploit / PoC in the wildCVE-2025-31324

Critical SAP flaw exploited to launch Auto

Security AffairsJul 30, 07:46 UTC · Jul 30, 2025Exploit / PoC CVE-2025-31324

SAP Patches Critical NetWeaver (CVSS Up to 10.0) and High

The Hacker NewsSep 10, 06:09 UTC · Sep 10, 2025Vulnerability in the wildCVE-2025-42944 CVE-2025-42922 CVE-2025-42958+2 CVEs

Auto-Color Backdoor Malware Exploits SAP Vulnerability

Infosecurity MagazineJul 29, 15:10 UTC · Jul 29, 2025Vulnerability CVE-2025-31324

2026-011: Critical Vulnerabilities in SAP Kernel and NetWeaver Message Server

SAP patched two critical flaws, OVERPASS (CVE-2026-44756, CVSS 10.0) and S4GET (CVE-2026-58240), allowing unauthenticated attackers to execute OS commands on SAP hosts.

On SAP's September 2026 Security Patch Day, SAP released Security Notes 3747649 and 3759472 fixing two critical unauthenticated remote vulnerabilities found by Onapsis. CVE-2026-44756 ('OVERPASS', CVSS 10.0) is a memory corruption flaw in Extended Passport (EPP) deserialisation in the SAP Kernel; CVE-2026-58240 ('S4GET', CVSS 9.8) is a missing authentication check in the NetWeaver Message Server that lets attackers register as trusted cluster nodes. Successful exploitation of either can yield OS command execution as the SAP service account, leading to full system and business data compromise, and CERT-EU urges immediate patching. No in-the-wild exploitation is reported.

CERT-EU AdvisoriesSep 9, 00:00 UTC · 7d agoVulnerability CVE-2026-44756 CVE-2026-58240

September 2020 Patch Tuesday: Microsoft fixes over 110 CVEs again

Help Net SecuritySep 8, 00:00 UTC · Sep 8, 2020Vulnerability in the wildCVE-2020-16875 CVE-2020-0688 CVE-2020-0951+5 CVEs

SAP June 2025 Security Patch Day fixed critical NetWeaver bug

Security AffairsJun 10, 17:31 UTC · Jun 10, 2025Vulnerability CVE-2025-42989 CVE-2025-42982 CVE-2025-42983+3 CVEs

New Highly-Critical SAP Bug Could Let Attackers Take Over Corporate Servers

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2020Vulnerability in the wildCVE-2020-6287

SAP Security Notes

Security AffairsFeb 15, 15:14 UTC · Feb 15, 2018Vulnerability CVE-2018-2368 CVE-2018-2380 CVE-2018-2369+1 CVEs

SAP cyberattack widens, drawing Salt Typhoon and Volt Typhoon comparisons

CyberScoopMay 15, 17:45 UTC · May 15, 2025Threat actor in the wild

Ivanti, Fortinet, and SAP Release Patches for Multiple Critical Vulnerabilities

The Hacker NewsJun 12, 18:42 UTC · Jun 12, 2026Vulnerability in the wildCVE-2026-25089 CVE-2026-10520 CVE-2026-10523+4 CVEs

October 2020 Patch Tuesday: Microsoft fixes potentially wormable Windows TCP/IP RCE flaw

Help Net SecurityOct 13, 00:00 UTC · Oct 13, 2020Vulnerability in the wildCVE-2020-16898 CVE-2020-16947 CVE-2020-16909+7 CVEs

Microsoft, Adobe, SAP deliver critical fixes for September 2025 Patch Tuesday

Help Net SecuritySep 10, 00:00 UTC · Sep 10, 2025Vulnerability in the wildCVE-2025-54918 CVE-2025-54916 CVE-2025-55232+8 CVEs

Watch Out! Mission Critical SAP Applications Are Under Active Attack

The Hacker NewsApr 7, 04:31 UTC · Apr 7, 2021Ransomware in the wildCVE-2020-6287 CVE-2010-5326 CVE-2016-3976+3 CVEs

Critical SAP Recon flaw exposes thousands of system to full take over

Security AffairsJul 14, 10:08 UTC · Jul 14, 2020Vulnerability in the wildCVE-2020-6287

SAP fixed maximum

Security AffairsOct 15, 10:03 UTC · Oct 15, 2025Vulnerability CVE-2025-42944 CVE-2025-42937 CVE-2025-42910

Public Exploit for Chained SAP Flaws Exposes Unpatched Systems to Remote Code Execution

The Hacker NewsAug 19, 17:30 UTC · Aug 19, 2025Vulnerability CVE-2025-31324 CVE-2025-42999 CVE-2025-30012+4 CVEs

Hackers Exploit SAP Vulnerability to Breach Linux Systems and Deploy Auto

The Hacker NewsJul 30, 07:50 UTC · Jul 30, 2025Vulnerability CVE-2025-31324

⚡ Weekly Recap: Critical SAP Exploit, AI-Powered Phishing, Major Breaches, New CVEs & More

The Hacker NewsMay 6, 07:05 UTC · May 6, 2025Phishing & fraud CVE-2025-31324 CVE-2024-58136 CVE-2025-32432+16 CVEs

A light December 2020 Patch Tuesday for a no-stress end of the year

Help Net SecurityDec 8, 00:00 UTC · Dec 8, 2020Vulnerability in the wildCVE-2020-17132 CVE-2020-16875 CVE-2020-17095+2 CVEs

SAP Patches CVSS 10.0 Kernel Flaw Enabling Unauthenticated Remote Code Execution

SAP patched CVE-2026-44756 (CVSS 10.0), an unauthenticated kernel memory corruption allowing OS command execution, plus three other critical flaws.

SAP's September security updates include CVE-2026-44756 (OVERPASS, CVSS 10.0), a missing boundary validation during deserialization of Extended Passport (EPP) data in the SAP kernel, enabling unauthenticated attackers to run arbitrary OS commands with SAP administrative privileges. Also patched: CVE-2026-58240 (S4GET, CVSS 9.8), a missing authentication check in SAP NetWeaver Message Server yielding RCE as <sid>adm; CVE-2026-76969 (9.4), credential disclosure in SAP Cloud Application Programming Model multi-tenant apps; and CVE-2026-66768 (9.0), improper access control in SAP NetWeaver SAP GUI for Java. Onapsis, which discovered the flaws, says none have been exploited to date and recommends prioritizing internet-facing SAP systems.

The Hacker NewsSep 9, 06:25 UTC · 7d agoVulnerability CVE-2026-44756 CVE-2026-58240 CVE-2026-76969+1 CVEs