SAP security advisory – October 2026 monthly rollup (AV26-1030)
Canadian Cyber Centre urges patching after SAP's October 2026 rollup affects multiple products.
Stories per day · 30 days
1 RSS
4 stories, newest first · one card per story
Stories tagged #s4hana
SAP Patches Maximum Severity “Overpass” Flaw
Onapsis warns over 10,000 internet-facing SAP systems may be exposed to maximum-severity unauthenticated RCE flaw CVE-2026-44756 in SAP Extended Passport.
1
SAP Patches Critical Extended Passport Processing Vulnerability
SAP patches CVSS 10.0 flaw CVE-2026-44756 (OVERPASS) enabling unauthenticated RCE in S/4HANA and NetWeaver, plus three other criticals; no in-the-wild exploitation reported.
SAP Security Updates September 2026 – Critical Flaws Patched in SAP NetWeaver, Cloud and Extended Passport
SAP's September 2026 Patch Day fixes 19 notes including CVE-2026-44756 (CVSS 10.0), unauthenticated memory corruption in SAP Extended Passport Processing kernels.
3