【Vulnerability Alert】SAP Issues Major Security Advisory for Multiple Products Under Its Brand
Subject:【Vulnerability Alert】SAP Issues Major Security Advisory for Multiple Products Under Its Brand
Description:
Forwarded from TWCERT/CC Security Advisory TWCERTCC-200-202609-00000019
SAP released its September periodic update, which fixes a total of 20 vulnerabilities, 4 of which are high-risk security vulnerabilities (CVE-2026-44756, CVSS: 10.0, CVE-2026-58240, CVSS: 9.8, CVE-2026-76969, CVSS: 9.4, and CVE-2026-66768, CVSS: 9.0).
CVE-2026-44756: A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Under specific conditions, an unauthenticated attacker can exploit a specially crafted network request to cause undefined behavior and abnormal termination of the program.
CVE-2026-58240: SAP NetWeaver Message Server performs insufficient authenticity verification of internal application server components during the registration process. An unauthenticated attacker with network access may perform unauthorized operations within the application environment.
CVE-2026-76969: The @sap/cds-mtxs NPM library does not sufficiently check certain features used in multitenant CAP applications with extensibility enabled. An unauthenticated attacker can exploit specially crafted requests to obtain sensitive credentials.
CVE-2026-66768: SAP GUI for Java fails to properly enforce trust level policies for certain function calls from the connected backend system. A low-privilege attacker can exploit this vulnerability by manipulating the connected backend system to execute arbitrary commands on the victim's machine.