SAP Commerce Cloud CVE-2026-58231 Exploited in the Wild Days After Patch
A maximum-severity vulnerability in SAP Commerce Cloud, tracked as CVE-2026-58231, is now being actively exploited in the wild, just days after SAP…
Tag: Onapsis
SAP Commerce Cloud Critical Flaw CVE-2026-58231 Allows Unauthenticated RCE
SAP has released patches for a maximum-severity vulnerability in Commerce Cloud (Data Hub Adapter) that could allow unauthenticated attackers to execute arbitrary…
SAP Patches Critical CVSS 9.9 NetWeaver ABAP Flaw Allowing Data Exposure or Modification
SAP has released its July 2026 security updates, addressing multiple vulnerabilities including a critical out-of-bounds write flaw in SAP NetWeaver Application Server…
Ivanti, Fortinet, and SAP Release Patches for Multiple Critical Vulnerabilities
Ivanti, Fortinet, and SAP have released security patches addressing multiple critical vulnerabilities that could lead to arbitrary code execution and information disclosure.Fortinet…
Onapsis: SAP Security Company
Onapsis is a cybersecurity company specializing in the security of SAP and other business-critical applications. It provides threat intelligence and guidance on…
CVE-2026-44748: SAP NetWeaver AS ABAP XML Signature Wrapping Vulnerability
An XML signature wrapping vulnerability in SAML authentication in SAP NetWeaver AS ABAP and ABAP Platform allows authenticated attackers to tamper with…