Vulnerabilities
The bugs could allow attackers to invoke internal operations and execute code, completely compromising the system.
Hi, what are you looking for?
SecurityWeek
All posts tagged "SAP"
Vulnerabilities
Affecting the SAP kernel code, the flaw allows unauthenticated, remote attackers to run arbitrary commands, recover secrets, and modify data.
Vulnerabilities
The vulnerability tracked as CVE-2026-58231 can be exploited to execute arbitrary code and compromise internal components.
Vulnerabilities
SAP released 28 new and two updated security notes, including four notes dealing with critical-severity bugs.
Vulnerabilities
The flaws could allow attackers to access and modify data, and cause system unavailability and request-response desynchronization.
Vulnerabilities
The flaws could lead to the disclosure of sensitive information, memory corruption, and disruption of normal system usage.
Vulnerabilities
The flaws could allow attackers to inject malicious code, leading to information disclosure and code execution.
Supply Chain Security
The compromised Lightning and Intercom packages have a combined monthly download count of nearly 10 million.
Malware & Threats
The Mini Shai-Hulud attack introduced a preinstall hook to fetch and execute a Bun binary and bypass security monitoring.
Vulnerabilities
The company has released 19 new security notes addressing flaws in over a dozen enterprise products.
Vulnerabilities
A code injection bug in FS-QUO and an insecure deserialization flaw in NetWeaver could lead to arbitrary code execution.
Vulnerabilities
SAP has released 26 new and one updated security notes on February 2026 security patch day.
Vulnerabilities
SAP has released 17 security notes, including four that address critical SQL injection, RCE, and code injection vulnerabilities.
Vulnerabilities
Affecting Solution Manager, Commerce Cloud, and jConnect SDK, the bugs could lead to code injection and remote code execution.
Vulnerabilities
Hardcoded credentials in SQL Anywhere Monitor could allow attackers to execute arbitrary code on vulnerable deployments.
Vulnerabilities
SAP has rolled out additional protections for insecure deserialization bugs resolved in NetWeaver AS Java recently.
Vulnerabilities
The critical-severity NetWeaver flaws could be exploited for remote code execution and privilege escalation.
Vulnerabilities
A critical SAP S/4HANA code injection flaw tracked as CVE-2025-42957 and allowing full system takeover has been exploited in the wild.
Vulnerabilities
A new public exploit chains two critical flaws in SAP NetWeaver, exposing unpatched instances to code execution attacks.
Vulnerabilities
SAP has released 15 new security notes on the August 2025 Patch Tuesday, including for critical vulnerabilities.
ICS/OT
Four EPICS Base flaws found by an autonomous system could let attackers crash processes at particle accelerators and fusion labs.
Vulnerabilities
Malware & Threats
Artificial Intelligence
Cybercrime
Artem Stryzhak was sentenced to 70 months in prison after pleading guilty to using Nefilim ransomware in attacks.
Cybersecurity Funding
Vulnerabilities
Vulnerabilities
