SAP Patches Critical Vulnerabilities in NetWeaver, Approuter, Commerce Cloud

https://www.securityweek.com/wp-content/uploads/2024/02/SAP.jpeg

Enterprise software maker SAP on Tuesday announced the release of 19 new and updated security notes as part of its July 2026 security patch day.

The most severe of the resolved vulnerabilities is CVE-2026-44747 (CVSS score of 9.9), a memory corruption bug in NetWeaver Application Server ABAP.

Successful exploitation of the security defect could allow an attacker to access and modify data, and cause system unavailability, SAP security firm Onapsis explains.

SAP customers are strongly advised to apply the fresh patches to resolve the flaw, but can also “disable all ICF nodes with a specific property in transaction SICF” as a temporary workaround.

The second security note released on SAP’s July 2026 security patch day fixes a critical HTTP request smuggling issue in Approuter, tracked as CVE-2026-27690 (CVSS score of 9.1).

“The vulnerability affects SAP Approuter deployments in non-Cloud Foundry environments and allows an unauthenticated attacker to send a specially...

Copyright of this story solely belongs to securityweek.com. To see the full text click HERE

Read more

https://cdn.mos.cms.futurecdn.net/z9eTkUmwMKZCXZehM4WcAX-2518-80.jpg

‘A great option for musicians on a budget and casual listeners alike’: Beyerdynamic’s new IEMs offer impressive bass and a secure fit at a tempting low price — but they’re not quite perfect

With clear sound across the frequency range, impressive bass output and a comfortable in-ear fit, the Beyerdynamic DT 30 IE feel worth their relatively modest price. Some rivals arguably offer more intricate mids and expressive highs, and the IEMs themselves could have a neater finish, but they’re still a