SAP Security Patch Day October 2026 fixes four critical vulnerabilities, including a CVSS 10.0 Cloud SDK flaw and 9.9 bugs in Visual Composer and S/4HANA.
SAP NetWeaver
SAP August 2026 Patch Day fixes CVE-2026-58231 (CVSS 10.0) and code injection RCE flaws scoring 9.9 and 9.8 in Commerce Cloud and NetWeaver.
SAP’s August 2025 Patch Day fixes critical code injection flaws in S/4HANA and SLT that could allow full ERP compromise via RFC exploits.
Details on a zero-day vulnerability (CVE-2025-31324) in SAP NetWeaver that allows file uploads and its link to the Qilin ransomware group.
Urgent: SAP's May 2025 Security Patch Day reveals critical vulnerabilities! Learn about the latest threats and how to protect your systems. Act now to secure your SAP landscape
CVE-2025-31324 in SAP NetWeaver is under active attack. A critical zero-day flaw allows unauthenticated file uploads and remote code execution.
CVE-2025-31324 lets attackers exploit SAP NetWeaver to upload webshells and deploy C2 tools like Brute Ratel, affecting patched enterprise systems.
Explore the details of CVE-2024-48248 in CISA's catalog of exploited vulnerabilities and protect your systems effectively.