Tia N.List

Reported by 2 outlets

SAP September 2026 Security Update Fixes 4 Critical Vulnerabilities and 15 Other Flaws

hot0.0
Why this score
Breadth
1.00 / 2.0 · 2 sources
Authority
1.20 / 2.0 · best outlet weight
Severity
4.50 / 5.0 · CVSS + content signals
Velocity
0.00 / 2.0 · updates in 48h
Pickup speed
0.56 / 0.6 · time to second source
Recency
× 0.00 temporal multiplier
Community
+ 0.00 / 1.5 · reddit signal
Score
0.0 / 10 = base × recency + community
gbhackers.comcyberpress.org CVE-2026-44756CVE-2026-58240CVE-2026-76969 first seen 35d ago

Timeline

  1. original reporting

    SAP September 2026 Security Update Fixes 4 Critical Vulnerabilities and 15 Other Flaws

    gbhackers.com · 35d ago · September 8th, 2026

    SAP released 19 new Security Notes addressing four critical vulnerabilities and 15 additional flaws throughout its enterprise portfolio. The vendor also updated one note from August. The most urgent issue is CVE-2026-44756, a memory-corruption vulnerability in Extended Passport (EPP) Processing with a CVSS score of 10.0. This flaw affects numerous SAP Kernel and Web Dispatcher […] The post SAP September 2026 Security Update Fixes 4 Critical Vulnerabilities and 15 Other Flaws appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .

  2. update from cyberpress.org

    SAP Security Patch Day Fixes 19 New Vulnerabilities Across NetWeaver, S/4HANA and Cloud Products

    cyberpress.org · 35d ago · September 8th, 2026

    SAP has released 19 new Security Notes as part of its September 2026 Security Patch Day, addressing vulnerabilities across SAP NetWeaver , S/4HANA, SAP Commerce Cloud, SAP Integration Suite, SAPUI5, and cloud application-development components. It affects multiple SAP Kernel and Web Dispatcher releases, including Kernel 7.22, 7.53, 7.54, 7.77, 7.89, 7.93, 8.04, and Web Dispatcher 9.16 through 9.20. Given its network attack vector, lack of authentication requirement, and potential impact on confidentiality, integrity, and availability, administrators should treat the update as an emergency patching priority. SAP also fixed CVE-2026-58240, a critical missing-authentication flaw in the SAP NetWeaver Message Server . An unauthenticated attacker could potentially exploit the issue remotely, making exposed or insufficiently segmented Message Server deployments a particular concern. A third critical issue, CVE-2026-76969, affects multitenant applications using the sap/cds-mtxs library in SAP Cloud Application Programming Model environments. The credential-disclosure vuln

Source on GitHub