We've created the first of its kind, SecurityBridge Cloud Platform, designed to prioritize SAP patches, updates, and remediation strategies that help prevent disruptions to critical business systems. Our security advisories provide SAP users with valuable insights into the security and business implications of operating SAP.

The user interface is designed to be as intuitive as possible, but we’d love to hear your feedback and suggestions.

×

Yikes, there is work to do!
This time we found critical correction advisiories. We count 22 and the highest CVSS score is 10.0.

 

Severity
SAP© Security advisories 22
 System Types
Affected SAP© system types

 

Related note
3747649
CVSS
10.0

Affected system type Kernel / Web Dispatcher
Patchday 2026-09
Released on 2026/09/08
Description [CVE-2026-44756] Memory Corruption vulnerability in SAP Extended Passport (EPP) Processing
Security Advisory
Related note
3759472
CVSS
9.8

Affected system type Kernel
Patchday 2026-09
Released on 2026/09/08
Description [ CVE-2026-58240] Missig Authentication check in SAP NetWeaver (Message Server)
Security Advisory
Related note
3798315
CVSS
9.4

Affected system type BTP
Patchday 2026-09
Released on 2026/09/08
Description [CVE-2026-76969] Credential disclosure in multitenant applications using SAP Cloud Application Programming Model (CAP)
Security Advisory
Related note
3781729
CVSS
9.0

Affected system type SAP GUI / Frontend
Patchday 2026-09
Released on 2026/09/08
Description [CVE-2026-66768] Improper Access Control in SAP NetWeaver (SAP GUI for Java)
Security Advisory
Related note
3792978
CVSS
8.5

Affected system type SAP Edge Integration
Patchday 2026-09
Released on 2026/09/08
Description [CVE-2026-76958] XML External Entity (XXE) Vulnerability in SAP Integration Suite
Security Advisory
Related note
3784138
CVSS
7.8

Affected system type SAP Business Client
Patchday 2026-09
Released on 2026/09/08
Description [CVE-2026-76967] Insecure Deserialization in SAP NetWeaver Business Client
Security Advisory
Related note
3757002
CVSS
7.7

Affected system type Kernel
Patchday 2026-09
Released on 2026/09/08
Description [CVE-2026-66767] Memory Corruption vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform
Security Advisory
Related note
3485073
CVSS
7.5

Affected system type ABAP
Patchday 2026-09
Released on 2026/08/25
Description [CVE-2026-66766] Denial of Service (DoS) due to use of third-party component in SAP S/4HANA (Manage Supply Protection)
Security Advisory
Related note
3791068
CVSS
7.4

Affected system type SAP Commerce Cloud
Patchday 2026-09
Released on 2026/09/08
Description [CVE-2026-2332] CLRF Injection vulnerability due to use of Jetty components in SAP Commerce Cloud (Search And Navigation)
Security Advisory
Related note
3786489
CVSS
6.5

Affected system type Java
Patchday 2026-09
Released on 2026/09/08
Description [CVE-2026-76971] Server-Side Request Forgery in SAP Manufacturing Integration and Intelligence
Security Advisory
Related note
3750721
CVSS
6.5

Affected system type Content Server /...
Patchday 2026-09
Released on 2026/09/08
Description [CVE-2026-76968] Information Disclosure vulnerability in SAP Web Dispatcher, Internet Communication Manager and SAP Content Server
Security Advisory
Related note
3756450
CVSS
6.5

Affected system type ABAP
Patchday 2026-09
Released on 2026/09/08
Description [CVE-2026-44766] - SQL Injection vulnerability in SAP S/4HANA (Intercompany Matching and Reconciliation)
Security Advisory
Related note
3678417
CVSS
6.1

Affected system type ABAP
Patchday 2026-09
Released on 2026/02/10
Description [CVE-2026-0505] Multiple vulnerabilities in BSP Applications of SAP Document Management System
Security Advisory
Related note
3787345
CVSS
5.9

Affected system type SAP Commerce Cloud
Patchday 2026-09
Released on 2026/09/08
Description [CVE-2026-34477] Security Misconfiguration vulnerability due to use of Apache Log4j in SAP Commerce Cloud (Search and Navigation)
Security Advisory
Related note
3680888
CVSS
5.3

Affected system type ABAP
Patchday 2026-09
Released on 2026/09/22
Description [CVE-2026-76974] Information Disclosure vulnerability in SAP Fiori Launchpad
Security Advisory
Related note
3365276
CVSS
4.3

Affected system type ABAP
Patchday 2026-09
Released on 2026/09/08
Description [CVE-2026-76960] Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management)
Security Advisory
Related note
3783189
CVSS
4.3

Affected system type ABAP
Patchday 2026-09
Released on 2026/09/08
Description [CVE-2026-76977] Clickjacking vulnerability in SAPUI5(Frame Options Allowlist)
Security Advisory
Related note
3657599
CVSS
4.3

Affected system type ABAP
Patchday 2026-09
Released on 2026/09/08
Description [CVE-2026-76962] Missing Authorization check in SAP S/4HANA (Manage Bank Chains app)
Security Advisory
Related note
3365311
CVSS
4.3

Affected system type ABAP
Patchday 2026-09
Released on 2026/09/08
Description [CVE-2026-76959] Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management)
Security Advisory
Related note
3371336
CVSS
4.3

Affected system type ABAP
Patchday 2026-09
Released on 2026/09/08
Description [CVE-2026-76961] Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management)
Security Advisory
Related note
3772838
CVSS
4.3

Affected system type ABAP
Patchday 2026-09
Released on 2026/09/08
Description [CVE-2026-76963] Missing Authorization Check in Application Server ABAP of SAP NetWeaver and ABAP Platform
Security Advisory
Related note
3736494
CVSS
2.2

Affected system type Java
Patchday 2026-09
Released on 2026/09/08
Description [CVE-2026-58234] Denial of Service vulnerability in SAP Process Integration(SOAP Adapter)
Security Advisory