SAP

The “Mini Shai-Hulud” Attack Hijacking SAP Developer Pipelines

• Malware

The “Mini Shai-Hulud” Attack Hijacking SAP Developer Pipelines

Do Son April 29, 2026 0

Security researchers have sounded the alarm on a precision-targeted supply-chain compromise striking the SAP developer ecosystem. The...

Read More Read more about The “Mini Shai-Hulud” Attack Hijacking SAP Developer Pipelines

Final Patch of 2025: Critical SAP Solution Manager Flaw (CVE-2025-42880, CVSS 9.9) Risks Full System Compromise

• Vulnerability Report

Final Patch of 2025: Critical SAP Solution Manager Flaw (CVE-2025-42880, CVSS 9.9) Risks Full System Compromise

Do Son December 9, 2025 0

Today, SAP has released its final security update of the year, dropping 14 new security notes. The...

Read More Read more about Final Patch of 2025: Critical SAP Solution Manager Flaw (CVE-2025-42880, CVSS 9.9) Risks Full System Compromise

SAP November 2025 Patch Day Fixes 3 Critical Flaws (CVSS 10) — Including Code Injection and Insecure Key Management

• Vulnerability Report

SAP November 2025 Patch Day Fixes 3 Critical Flaws (CVSS 10) — Including Code Injection and Insecure Key Management

Do Son November 11, 2025 0

Today, SAP released its latest batch of Security Patch Day updates, delivering 18 new security notes and...

Read More Read more about SAP November 2025 Patch Day Fixes 3 Critical Flaws (CVSS 10) — Including Code Injection and Insecure Key Management

SAP Patches Critical 10.0 Flaw in NetWeaver: Unauthenticated RCE Risk

• Vulnerability Report

SAP Patches Critical 10.0 Flaw in NetWeaver: Unauthenticated RCE Risk

Do Son October 14, 2025 0

SAP has released its October 2025 Security Patch Day, addressing 13 new security notes and 3 updates...

Read More Read more about SAP Patches Critical 10.0 Flaw in NetWeaver: Unauthenticated RCE Risk

SAP Security Patch Day Fixes Four Critical Flaws, Including a CVSS 10.0 RCE (CVE-2025-42944)

• Vulnerability Report

SAP Security Patch Day Fixes Four Critical Flaws, Including a CVSS 10.0 RCE (CVE-2025-42944)

Do Son September 9, 2025 0

Today, SAP released 21 new Security Notes and 4 updates as part of its monthly Security Patch...

Read More Read more about SAP Security Patch Day Fixes Four Critical Flaws, Including a CVSS 10.0 RCE (CVE-2025-42944)

SAP Patch Day August 2025: Critical Code Injection Flaws Threaten Core ERP Systems

• Vulnerability Report

SAP Patch Day August 2025: Critical Code Injection Flaws Threaten Core ERP Systems

Do Son August 12, 2025 0

Today, 2025, SAP released 15 new Security Notes and 4 updates to previously issued advisories as part...

Read More Read more about SAP Patch Day August 2025: Critical Code Injection Flaws Threaten Core ERP Systems

SAP’s July 2025 Patch Day Brings 27 New Notes, Multiple Critical RCE & Deserialization Flaws (CVSS 10.0)

• Vulnerability Report

SAP’s July 2025 Patch Day Brings 27 New Notes, Multiple Critical RCE & Deserialization Flaws (CVSS 10.0)

Do Son July 8, 2025 0

SAP’s July 2025 Security Patch Day delivered a total of 27 new security notes and 3 updates...

Read More Read more about SAP’s July 2025 Patch Day Brings 27 New Notes, Multiple Critical RCE & Deserialization Flaws (CVSS 10.0)

CISA Flags Actively Exploited Vulnerabilities in Chrome, SAP, and DrayTek Routers

• Vulnerability

CISA Flags Actively Exploited Vulnerabilities in Chrome, SAP, and DrayTek Routers

Do Son May 16, 2025 0

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three new security vulnerabilities to its Known...

Read More Read more about CISA Flags Actively Exploited Vulnerabilities in Chrome, SAP, and DrayTek Routers

SAP Security Alert: May 2025 Patch Day Exposes Critical Threats!

• Vulnerability

SAP Security Alert: May 2025 Patch Day Exposes Critical Threats!

Do Son May 13, 2025 0

Today, 2025, SAP released 16 new Security Notes and updated 2 previously released ones as part of...

Read More Read more about SAP Security Alert: May 2025 Patch Day Exposes Critical Threats!

From Web Shell to Full Control: APT-Style Exploits Surge Against SAP NetWeaver

• Malware
• Vulnerability

From Web Shell to Full Control: APT-Style Exploits Surge Against SAP NetWeaver

Do Son May 11, 2025 0

In a report issued by Unit 42, researchers disclosed that the vulnerability CVE-2025-31324, affecting SAP NetWeaver’s Visual...

Read More Read more about From Web Shell to Full Control: APT-Style Exploits Surge Against SAP NetWeaver

CVE-2024-47578 (CVSS 9.1): SAP Issues Critical Patch for NetWeaver AS for JAVA

• Vulnerability

CVE-2024-47578 (CVSS 9.1): SAP Issues Critical Patch for NetWeaver AS for JAVA

Do Son December 10, 2024 0

SAP’s latest Security Patch Day, released today, detailed 10 new Security Notes alongside updates to three previously...

Read More Read more about CVE-2024-47578 (CVSS 9.1): SAP Issues Critical Patch for NetWeaver AS for JAVA

SAP Patches Multiple Vulnerabilities in November 2024 Security Patch Day

• Vulnerability

SAP Patches Multiple Vulnerabilities in November 2024 Security Patch Day

Do Son November 12, 2024 0

SAP has released eight new security notes and two updates to previously released notes in its November...

Read More Read more about SAP Patches Multiple Vulnerabilities in November 2024 Security Patch Day

SAP Patches Critical BusinessObjects Vulnerability with October Security Updates

• Vulnerability

SAP Patches Critical BusinessObjects Vulnerability with October Security Updates

Do Son October 8, 2024 0

SAP has released its monthly security patch updates, addressing several vulnerabilities across its product portfolio. The October...

Read More Read more about SAP Patches Critical BusinessObjects Vulnerability with October Security Updates

SAP Security Patch Day: CVE-2024-22127 – Critical Vulnerability Demand Immediate Action

• Vulnerability

SAP Security Patch Day: CVE-2024-22127 – Critical Vulnerability Demand Immediate Action

Do Son March 12, 2024 0

Enterprise software leader SAP released a critical set of patches as part of its March 2024 Security...

Read More Read more about SAP Security Patch Day: CVE-2024-22127 – Critical Vulnerability Demand Immediate Action

CVE-2024-22131 (CVSS 9.1): Critical flaws affect SAP products

• Vulnerability

CVE-2024-22131 (CVSS 9.1): Critical flaws affect SAP products

Do Son February 13, 2024 0

German software giant SAP has sounded the alarm bells with its February 2024 Security Patch Day, releasing...

Read More Read more about CVE-2024-22131 (CVSS 9.1): Critical flaws affect SAP products