SAP Security Patch Day

SAP Security Patch Day October 2026 Fixes CVSS 10 Cloud SDK Flaw and Three More Critical Bugs

SAP Security Patch Day October 2026 critical vulnerabilities in Cloud SDK, Visual Composer and S/4HANA

SAP Security Patch Day October 2026 Fixes CVSS 10 Cloud SDK Flaw and Three More Critical Bugs

Do Son October 13, 2026

TL;DR SAP Security Patch Day for October 2026 addressed 20 CVEs on October 13. Four of them...

September 2026 SAP Security Patch Day Fixes Critical Flaws

September 2026 SAP Security Patch Day dashboard showing CVE-2026-44756 alerts

September 2026 SAP Security Patch Day Fixes Critical Flaws

Do Son September 8, 2026

TL;DR On September 8, 2026, the software vendor released 19 new security notes and one update during...

SAP Patches CVE-2026-44747 (CVSS 9.9): Critical Memory Corruption Flaw in NetWeaver AS ABAP SAP Security Patch Day July 2026 CVE-2026-44747 memory corruption vulnerability in NetWeaver AS ABAP

SAP Security Patch Day July 2026 CVE-2026-44747 memory corruption vulnerability in NetWeaver AS ABAP

SAP Patches CVE-2026-44747 (CVSS 9.9): Critical Memory Corruption Flaw in NetWeaver AS ABAP

Do Son July 14, 2026

TL;DR SAP Security Patch Day July 2026 shipped 16 new security notes and one GitHub advisory. The...

SAP Patch Fixes Critical CVSS 9.6 Flaw in NetWeaver: Privilege Escalation and System Integrity at Risk SAP Security, Critical Vulnerabilities

SAP Security, Critical Vulnerabilities

SAP Patch Fixes Critical CVSS 9.6 Flaw in NetWeaver: Privilege Escalation and System Integrity at Risk

Do Son June 10, 2025

SAP’s June 2025 Security Patch Day addressed a total of 14 new vulnerabilities, including a critical issue...

SAP Security Patch Day February 2025: Multi Vulnerabilities Addressed CVE-2024-33006 - CVE-2025-0064 SAP Critical Patch, RMI-P4 RCE

CVE-2024-33006 - CVE-2025-0064 SAP Critical Patch, RMI-P4 RCE

SAP Security Patch Day February 2025: Multi Vulnerabilities Addressed

Do Son February 11, 2025

SAP has released its latest round of security patches, addressing 19 new vulnerabilities and updating 2 previous...

SAP Security Patch Day – August 2024: CVE-2024-41730 (CVSS 9.8) Vulnerability Exposes Systems to Full Control Exploit CVE-2024-41730 - SAP Security Patch Day SAP S/4HANA Vulnerability CVE-2026-0501

CVE-2024-41730 - SAP Security Patch Day SAP S/4HANA Vulnerability CVE-2026-0501

SAP Security Patch Day – August 2024: CVE-2024-41730 (CVSS 9.8) Vulnerability Exposes Systems to Full Control Exploit

Do Son August 13, 2024

SAP has released its monthly security patches for August 2024, addressing a range of vulnerabilities across its...

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2020-13125CVSS 7.2
An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
Watchtower Verified📅 Updated: Oct 24, 2026
CVE-2020-13126CVSS 9.9
An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
Watchtower Verified📅 Updated: Oct 24, 2026
CVE-2019-20180CVSS 8.0
The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
Watchtower Verified📅 Updated: Oct 24, 2026
CVE-2012-20004CVSS 5.1
K-news plugin for WordPress before 1.1.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject...
Watchtower Verified📅 Updated: Oct 23, 2026
CVE-2014-125134CVSS 8.7
ChurcHope theme for WordPress before 2.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary...
Watchtower Verified📅 Updated: Oct 23, 2026
CVE-2016-20100CVSS 8.7
Memphis Documents Library plugin for WordPress before 3.1.6 contains a path traversal vulnerability that allows unauthenticated attackers to...
Watchtower Verified📅 Updated: Oct 23, 2026
CVE-2026-110447CVSS 9.2
Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in...
CISA KEV📅 Added to KEV: Oct 23, 2026
CVE-2026-114625CVSS 9.9
VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access...
CISA KEV📅 Added to KEV: Oct 23, 2026

CVE-2026-9827CVSS 9.1
A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted...
📅 Updated: Oct 23, 2026
CVE-2026-9869CVSS 9.1
A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted...
📅 Updated: Oct 23, 2026
CVE-2026-9660CVSS 9.1
Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially...
📅 Updated: Oct 23, 2026
CVE-2026-9814CVSS 9.1
An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially...
📅 Updated: Oct 23, 2026
CVE-2026-9817CVSS 9.1
A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted...
📅 Updated: Oct 23, 2026
CVE-2026-42025CVSS 9.1
Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A...
📅 Updated: Oct 23, 2026
CVE-2026-42026CVSS 9.1
Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A...
📅 Updated: Oct 23, 2026
CVE-2026-35499CVSS 9.1
An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially...
📅 Updated: Oct 23, 2026