Search: “SAP NetWeaver”

139 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 73 Exploit / PoC 27 Ransomware 20 Malware 6 Industry 4 Phishing & fraud 3 Advisory 2 Threat actor 2 Policy & legal 1 Tools 1 AI research 1

SeverityAll critical 115 high 17 medium 6 low 1 info 1

SAP Security Updates September 2026 – Critical Flaws Patched in SAP NetWeaver, Cloud and Extended Passport

SAP's September 2026 Patch Day fixes 19 notes including CVE-2026-44756 (CVSS 10.0), unauthenticated memory corruption in SAP Extended Passport Processing kernels.

SAP shipped 19 new security notes plus one update across NetWeaver, S/4HANA, Integration Suite, Commerce Cloud, and Cloud Application Programming Model. Top issues include CVE-2026-44756 (CVSS 10.0 memory corruption in SAP Extended Passport Processing across many KERNEL and Web Dispatcher versions), CVE-2026-58240 (CVSS 9.8 missing authentication in NetWeaver Message Server), CVE-2026-76969 (CVSS 9.4 credential disclosure in CAP library sap/cds-mtxs), and CVE-2026-66768 (CVSS 9.0 access control flaw in SAP GUI for Java). No exploitation is reported; organizations running affected kernels are urged to patch urgently.

Cyber Security NewsSep 8, 11:19 UTC · 7d agoVulnerability CVE-2026-44756 CVE-2026-58240 CVE-2026-76969+17 CVEs

U.S. CISA adds SAP NetWeaver flaw to its Known Exploited Vulnerabilities catalog

Security AffairsApr 30, 00:05 UTC · Apr 30, 2025Exploit / PoC in the wildCVE-2025-31324 CVE-2017-9844

Critical SAP NetWeaver flaw exploited by suspected initial access broker (CVE-2025-31324)

Help Net SecurityAug 20, 08:46 UTC · Aug 20, 2025Vulnerability in the wildCVE-2025-31324

U.S. CISA adds Google Chromium, DrayTek routers, and SAP NetWeaver flaws to its Known Exploited Vulnerabilities catalog

Security AffairsMay 17, 08:02 UTC · May 17, 2025Exploit / PoC in the wildCVE-2024-12987 CVE-2025-4664 CVE-2025-42999

Experts warn of a second wave of attacks targeting SAP NetWeaver bug CVE-2025

Security AffairsMay 6, 13:55 UTC · May 6, 2025Exploit / PoC in the wildCVE-2025-313241

New Critical SAP NetWeaver Flaw Exploited to Drop Web Shell, Brute Ratel Framework

The Hacker NewsMay 6, 13:53 UTC · May 6, 2025Exploit / PoC in the wildCVE-2017-9844 CVE-2025-31324 CVE-2017-12637

BianLian and RansomExx Exploit SAP NetWeaver Flaw to Deploy PipeMagic Trojan

The Hacker NewsMay 15, 00:00 UTC · May 15, 2025Malware in the wildCVE-2025-31324 CVE-2025-29824 CVE-2025-42999

Exploit for critical SAP Netweaver flaws released (CVE-2025-31324, CVE-2025-42999)

Help Net SecurityAug 20, 00:00 UTC · Aug 20, 2025Vulnerability in the wildCVE-2025-31324 CVE-2025-42999 CVE-2025-30012+4 CVEs

U.S. CISA adds Edimax IC-7100 IP Camera, NAKIVO, and SAP NetWeaver AS Java flaws to its Known Exploited Vulnerabilities catalog

Security AffairsMar 20, 12:18 UTC · Mar 20, 2025Exploit / PoC in the wildCVE-2025-1316 CVE-2024-48248 CVE-2017-12637

Public Exploit Released for Critical SAP NetWeaver Flaw

Infosecurity MagazineAug 19, 16:45 UTC · Aug 19, 2025Ransomware in the wildCVE-2025-31324 CVE-2025-42999

SAP September 2026 Security Update Fixes 4 Critical Vulnerabilities and 15 Other Flaws

SAP's September 2026 Patch Tuesday ships 19 security notes, including four criticals led by a CVSS 10.0 memory-corruption flaw in Extended Passport Processing.

SAP released 19 new Security Notes plus one update, fixing four critical vulnerabilities and 15 additional flaws. The most urgent is CVE-2026-44756 (CVSS 10.0), memory corruption in Extended Passport (EPP) Processing affecting many SAP Kernel and Web Dispatcher releases. Other criticals include CVE-2026-58240 (NetWeaver Message Server missing authentication, 9.8), CVE-2026-76969 (credential disclosure in CAP sap/cds-mtxs, 9.4), and CVE-2026-66768 (improper access control in SAP GUI for Java, 9.0). High-severity fixes cover XXE in Integration Suite Trading Partner Management, deserialization in NetWeaver Business Client, and memory corruption in NetWeaver AS for ABAP.

GBHackersSep 8, 10:24 UTC · 8d agoVulnerability CVE-2026-44756 CVE-2026-58240 CVE-2026-76969+8 CVEs1

SAP April 2019 Security Patch Day addresses High severity flaws in Crystal Reports, NetWeaver

Security AffairsApr 11, 05:28 UTC · Apr 11, 2019Vulnerability CVE-2019-0285 CVE-2019-0283 CVE-2019-0265+5 CVEs

China-Linked APTs Exploit SAP CVE-2025-31324 to Breach 581 Critical Systems Worldwide

The Hacker NewsMay 15, 00:00 UTC · May 15, 2025Vulnerability in the wildCVE-2025-31324 CVE-2025-42999

New SAP NetWeaver Bug Lets Attackers Take Over Servers Without Login

The Hacker NewsOct 15, 00:00 UTC · Oct 15, 2025Exploit / PoC in the wildCVE-2025-42944 CVE-2025-42937 CVE-2025-42910

Week in review: Critical SAP NetWeaver flaw exploited, RSAC 2025 Conference

Help Net SecurityMay 4, 00:00 UTC · May 4, 2025Ransomware in the wildCVE-2025-31324 CVE-2025-3928 CVE-2025-42599+1 CVEs

SAP Flaw Exploited by Ransomware Groups and Chinese

Infosecurity MagazineMay 15, 15:15 UTC · May 15, 2025Ransomware in the wildCVE-2025-31324 CVE-2025-42999

SAP zero-day vulnerability under widespread active exploitation

CyberScoopApr 25, 17:51 UTC · Apr 25, 2025Exploit / PoC in the wildCVE-2025-31324

Critical SAP flaw exploited to launch Auto

Security AffairsJul 30, 07:46 UTC · Jul 30, 2025Exploit / PoC CVE-2025-31324

Hacking SAP CRM by chaining 2 flaws in SAP NetWeaver AS Java

Security AffairsMar 16, 05:31 UTC · Mar 16, 2018Vulnerability

SAP Patches Critical NetWeaver (CVSS Up to 10.0) and High

The Hacker NewsSep 10, 06:09 UTC · Sep 10, 2025Vulnerability in the wildCVE-2025-42944 CVE-2025-42922 CVE-2025-42958+2 CVEs

Auto-Color Backdoor Malware Exploits SAP Vulnerability

Infosecurity MagazineJul 29, 15:10 UTC · Jul 29, 2025Vulnerability CVE-2025-31324

SAP security advisory – September 2026 monthly rollup (AV26-894)

Canada's Cyber Centre relayed SAP's September 2026 Patch Day rollup covering vulnerabilities across NetWeaver, kernel components, CAP, and Integration Suite.

The Canadian Centre for Cyber Security published advisory AV26-894 noting that as of September 8, 2026, SAP is affected by vulnerabilities in multiple products, including SAP Extended Passport, NetWeaver Message Server, SAP Cloud Application Programming Model, SAP GUI for Java, Integration Suite Cloud Integration, NetWeaver Business Client, and NetWeaver AS for ABAP. The advisory corresponds to SAP Security Patch Day September 2026 and lists many affected kernel and web dispatcher versions. Administrators are urged to review the SAP advisory and apply updates as available.

Canadian Centre for Cyber SecuritySep 8, 18:03 UTC · 7d agoAdvisory

90% of the SAP customers exposed to hack due to 13 Year

Security AffairsApr 29, 17:14 UTC · Apr 29, 2018Vulnerability

2026-011: Critical Vulnerabilities in SAP Kernel and NetWeaver Message Server

SAP patched two critical flaws, OVERPASS (CVE-2026-44756, CVSS 10.0) and S4GET (CVE-2026-58240), allowing unauthenticated attackers to execute OS commands on SAP hosts.

On SAP's September 2026 Security Patch Day, SAP released Security Notes 3747649 and 3759472 fixing two critical unauthenticated remote vulnerabilities found by Onapsis. CVE-2026-44756 ('OVERPASS', CVSS 10.0) is a memory corruption flaw in Extended Passport (EPP) deserialisation in the SAP Kernel; CVE-2026-58240 ('S4GET', CVSS 9.8) is a missing authentication check in the NetWeaver Message Server that lets attackers register as trusted cluster nodes. Successful exploitation of either can yield OS command execution as the SAP service account, leading to full system and business data compromise, and CERT-EU urges immediate patching. No in-the-wild exploitation is reported.

CERT-EU AdvisoriesSep 9, 00:00 UTC · 7d agoVulnerability CVE-2026-44756 CVE-2026-58240