Microsoft fixes 1235 flaws, including exploited Outlook zero-day
CVE-2026-124194 can leak NTLMv2 hashes from Microsoft 365 Apps and Office LTSC 2021 and 2024 after one opened message file.
Stories per day · 30 days
2 RSS
Relatedsap8web-dispatcher5patch-day3sap-gateway3icm2shell2proxygate2remote-code-execution2saml2advisory1businessobjects1canada1honeypot1microsoft1ntlm1outlook1patch-tuesday1s4hana1webshell1
14 stories, newest first · one card per story
Stories tagged #netweaver
SAP patches four CVSS 10.0 flaws, including unauthenticated RCE
The November fixes cover NetWeaver ICM, Web Dispatcher, Gateway, and SAML, and none require user interaction.
SAP patches critical ICM2SHELL and ProxyGate kernel flaws
Onapsis gave SAP a working unauthenticated exploit for ICM2SHELL; the November notes also cover ProxyGate and a SAML impersonation bug.
SAP November 2026 notes fix four CVSS 10.0 unauthenticated flaws
The bulletin lists 35 new notes and does not report active exploitation of the patched issues.
SAP November patch day fixes four CVSS 10.0 flaws
Unauthenticated memory corruption in ICM and Web Dispatcher may allow code execution; exploitation is not discussed.
SAP security advisory – October 2026 monthly rollup (AV26-1030)
Canadian Cyber Centre urges patching after SAP's October 2026 rollup affects multiple products.
SAP Patches Maximum Severity “Overpass” Flaw
Onapsis warns over 10,000 internet-facing SAP systems may be exposed to maximum-severity unauthenticated RCE flaw CVE-2026-44756 in SAP Extended Passport.
1
SAP Patches CVSS 10.0 Kernel Flaw Enabling Unauthenticated Remote Code Execution
SAP patched CVE-2026-44756 (CVSS 10.0), an unauthenticated kernel memory corruption allowing OS command execution, plus three other critical flaws.
2026-011: Critical Vulnerabilities in SAP Kernel and NetWeaver Message Server
SAP patched two critical flaws, OVERPASS (CVE-2026-44756, CVSS 10.0) and S4GET (CVE-2026-58240), allowing unauthenticated attackers to execute OS commands on SAP hosts.
4
SAP security advisory – September 2026 monthly rollup (AV26-894)
Canada's Cyber Centre relayed SAP's September 2026 Patch Day rollup covering vulnerabilities across NetWeaver, kernel components, CAP, and Integration Suite.
SAP warns of maximum severity 'OVERPASS' kernel vulnerability
SAP's September 2026 patches fix maximum-severity kernel flaw CVE-2026-44756 (OVERPASS), letting unauthenticated attackers execute commands on 10,000+ internet-facing SAP systems.
SAP Security Updates September 2026 – Critical Flaws Patched in SAP NetWeaver, Cloud and Extended Passport
SAP's September 2026 Patch Day fixes 19 notes including CVE-2026-44756 (CVSS 10.0), unauthenticated memory corruption in SAP Extended Passport Processing kernels.
3
SAP September 2026 Security Update Fixes 4 Critical Vulnerabilities and 15 Other Flaws
SAP's September 2026 Patch Tuesday ships 19 security notes, including four criticals led by a CVSS 10.0 memory-corruption flaw in Extended Passport Processing.
4
SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code
SAP patched a CVSS 10.0 unauthenticated RCE flaw (CVE-2026-58231) in Commerce Cloud's Data Hub Adapter, plus three critical flaws in NetWeaver and Manufacturing.
2