SAP Patches Critical Vulnerabilities in NetWeaver, Approuter, Commerce Cloud

https://www.securityweek.com/wp-content/uploads/2024/02/SAP.jpeg

Enterprise software maker SAP on Tuesday announced the release of 19 new and updated security notes as part of its July 2026 security patch day.

The most severe of the resolved vulnerabilities is CVE-2026-44747 (CVSS score of 9.9), a memory corruption bug in NetWeaver Application Server ABAP.

Successful exploitation of the security defect could allow an attacker to access and modify data, and cause system unavailability, SAP security firm Onapsis explains.

SAP customers are strongly advised to apply the fresh patches to resolve the flaw, but can also “disable all ICF nodes with a specific property in transaction SICF” as a temporary workaround.

The second security note released on SAP’s July 2026 security patch day fixes a critical HTTP request smuggling issue in Approuter, tracked as CVE-2026-27690 (CVSS score of 9.1).

“The vulnerability affects SAP Approuter deployments in non-Cloud Foundry environments and allows an unauthenticated attacker to send a specially...

Copyright of this story solely belongs to securityweek.com. To see the full text click HERE

Read more

https://cdn.mos.cms.futurecdn.net/gn2pVK4F4zf9ZvW3ypaFod-1920-80.jpg

Microsoft's Maia 300 swaps raw compute for a 2.5x memory bandwidth gain as it moves to make in-house silicon its main AI engine while claiming a 40% efficiency bump — could going the Google route be the pin that pops the Nvidia AI bubble?

* Microsoft will make Maia its main inference engine at multi-gigawatt scale, following Google and Amazon into in-house silicon * Microsoft's upcoming Maia 300 trades a modest 36% compute gain for 2.5x Maia 200's memory bandwidth, betting on memory-bound decode, with production in 2027 * Hyperscalers supply just