CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

CSIRTSSecurity advisory fusion

← All products & vendors

SAP — security advisories

24 advisories15 exploitedlatest 2026-08-17⚡ RSS feed

Tracked SAP products:

NetWeaver NetWeaver Application Server (AS) Java Commerce Cloud NetWeaver Application Server ABAP Solution Manager Customer Relationship Management (CRM)NetWeaver Application Server Java Platforms SAP software SAP products Commerce Cloud Data Hub Adapter

⚡ Watch SAP

Get an email when a new SAP advisory drops — max one per day, one-click unsubscribe.

SAP security advisory – August 2026 monthly rollup (AV26-798) – Update 1

unknownCVE-2026-58231cccs2026-08-17

[NEW] [high] SAP Patch Day August 2026: Multiple vulnerabilities

criticalCVE-2026-34265 CVE-2026-40130 CVE-2026-44758 CVE-2026-44762cert-bund2026-08-17

NCSC-2026-0302 [1.00] [M/H] Vulnerabilities patched in SAP Commerce Cloud Data Hub Adapter

unknownCVE-2026-58231ncsc-nl2026-08-15

Multiple vulnerabilities in SAP products (August 11, 2026)

unknownCVE-2026-33871 CVE-2026-66760 CVE-2026-58247 CVE-2026-40130cert-fr-avis2026-08-11

[NEW] [high] SAP Patch Day July 2026

highCVE-2025-68161 CVE-2026-0487 CVE-2026-24315 CVE-2026-27690cert-bund2026-07-29

NCSC-2026-0230 [1.01] [M/H] Vulnerabilities fixed in SAP products

unknownCVE-2026-44747 CVE-2026-27690 CVE-2026-44761 CVE-2026-40128ncsc-nl2026-07-17

Multiple vulnerabilities in SAP products (July 15, 2026)

unknownCVE-2026-44761 CVE-2026-43515 CVE-2026-27690 CVE-2026-44759cert-fr-avis2026-07-15

SAP security advisory – July 2026 monthly rollup (AV26-690)

criticalcccs2026-07-14

NCSC-2026-0230 [1.00] [M/H] Vulnerabilities fixed in SAP products

unknownCVE-2026-44747 CVE-2026-27690 CVE-2026-44761 CVE-2026-40128ncsc-nl2026-07-14

CVE-2025-42999: SAP NetWeaver Deserialization Vulnerability

criticalexploitedCVE-2025-42999cisa-kev2025-05-15

CVE-2025-31324: SAP NetWeaver Unrestricted File Upload Vulnerability

criticalexploitedCVE-2025-31324cisa-kev2025-04-29

Vulnerability in SAP NetWeaver (April 28, 2025)

unknownexploitedCVE-2025-31324cert-fr-alerte2025-04-28

CVE-2017-12637: SAP NetWeaver Directory Traversal Vulnerability

criticalexploitedCVE-2017-12637cisa-kev2025-03-19

CVE-2019-0344: SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability

criticalexploitedCVE-2019-0344cisa-kev2024-09-30

CVE-2022-22536: SAP Multiple Products HTTP Request Smuggling Vulnerability

criticalexploitedCVE-2022-22536cisa-kev2022-08-18

CVE-2016-2386: SAP NetWeaver SQL Injection Vulnerability

criticalexploitedCVE-2016-2386cisa-kev2022-06-09

CVE-2021-38163: SAP NetWeaver Unrestricted File Upload Vulnerability

criticalexploitedCVE-2021-38163cisa-kev2022-06-09

CVE-2016-2388: SAP NetWeaver Information Disclosure Vulnerability

criticalexploitedCVE-2016-2388cisa-kev2022-06-09

CVE-2018-2380: SAP Customer Relationship Management (CRM) Path Traversal Vulnerability

criticalexploitedCVE-2018-2380cisa-kev2021-11-03

CVE-2020-6207: SAP Solution Manager Missing Authentication for Critical Function Vulnerability

criticalexploitedCVE-2020-6207cisa-kev2021-11-03

CVE-2020-6287: SAP NetWeaver Missing Authentication for Critical Function Vulnerability

criticalexploitedCVE-2020-6287cisa-kev2021-11-03

CVE-2016-9563: SAP NetWeaver XML External Entity (XXE) Vulnerability

criticalexploitedCVE-2016-9563cisa-kev2021-11-03

CVE-2016-3976: SAP NetWeaver Directory Traversal Vulnerability

criticalexploitedCVE-2016-3976cisa-kev2021-11-03

CVE-2010-5326: SAP NetWeaver Remote Code Execution Vulnerability

criticalexploitedCVE-2010-5326cisa-kev2021-11-03