Diterjemahkan oleh mesin; mungkin terdapat kesilapan. (Machine-translated; may contain errors.) Baca versi bahasa Inggeris (Read in English)
Hari Tampalan Keselamatan SAP: September 2026
Diterbitkan pada 8 September 2026 · 18 nota · Sumber: rekod CVE di CVE.org (SAP sebagai CNA)
Dijadualkan pada 8 September 2026 (Selasa kedua)
- Nota SAP
- 18
- Kritikal
- 4
- Tinggi
- 3
- CVSS tertinggi
- 10.0
- Diketahui dieksploitasi
- 0
Keutamaan diterbitkan daripada CVSS, bukan keutamaan SAP: CVSS 9.0 atau lebih ialah Kritikal, 7.0 atau lebih Tinggi, 4.0 atau lebih Sederhana, bawah 4.0 Rendah. Keutamaan SAP sendiri hanya terdapat di SAP for Me (log masuk SAP diperlukan).
Ringkasan kami
18 nota dengan CVE SAP. 4 Kritikal dan 3 Tinggi (keutamaan diterbitkan daripada CVSS, bukan keutamaan SAP). CVSS tertinggi 10.0.
Tampalan yang perlu didahulukan
Disusun mengikut: eksploitasi yang diketahui (CISA KEV), kemudian keutamaan (diterbitkan daripada CVSS, bukan keutamaan SAP), kemudian CVSS. Ini alat bantu triaj, bukan pengganti penilaian risiko anda sendiri.
Memory Corruption vulnerability in SAP Extended Passport (EPP) Processing
Missing Authentication check in SAP NetWeaver (Message Server)
Credential disclosure in multitenant applications using SAP Cloud Application Programming Model (CAP)
Improper Access Control in SAP NetWeaver (SAP GUI for Java)
XML External Entity (XXE) Vulnerability in SAP Integration Suite
Perlukan triaj nota bulan ini untuk landskap anda sendiri? Khidmat keselamatan SAP (digitaldisciple.dev)
Semua nota
Keutamaan diterbitkan daripada CVSS, bukan keutamaan SAP: CVSS 9.0 atau lebih ialah Kritikal, 7.0 atau lebih Tinggi, 4.0 atau lebih Sederhana, bawah 4.0 Rendah. Keutamaan SAP sendiri hanya terdapat di SAP for Me (log masuk SAP diperlukan).
Liputan: laman ini disusun daripada rekod CVE SAP, jadi nota tanpa CVE, nota yang hanya mempunyai CVE pihak ketiga (contohnya Apache atau OpenSSL), dan kemas kini kepada nota terdahulu tidak diliputi. Jumlahnya kira-kira 7% daripada nota baharu.
Memaparkan 18 daripada 18
| Tajuk | CVE | ||||
|---|---|---|---|---|---|
| 3747649 | Memory Corruption vulnerability in SAP Extended Passport (EPP) Processing Baharu | SAP Extended Passport (EPP) Processing | Kritikal | 10.0 | CVE-2026-44756 |
| 3759472 | Missing Authentication check in SAP NetWeaver (Message Server) Baharu | SAP NetWeaver | Kritikal | 9.8 | CVE-2026-58240 |
| 3798315 | Credential disclosure in multitenant applications using SAP Cloud Application Programming Model (CAP) Baharu | SAP Cloud Application Programming Model | Kritikal | 9.4 | CVE-2026-76969 |
| 3781729 | Improper Access Control in SAP NetWeaver (SAP GUI for Java) Baharu | SAP NetWeaver | Kritikal | 9.0 | CVE-2026-66768 |
| 3792978 | XML External Entity (XXE) Vulnerability in SAP Integration Suite Baharu | SAP Integration Suite | Tinggi | 8.5 | CVE-2026-76958 |
| 3784138 | Insecure Deserialization in SAP NetWeaver Business Client Baharu | SAP NetWeaver Business Client | Tinggi | 7.8 | CVE-2026-76967 |
| 3757002 | Memory Corruption vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform Baharu | SAP NetWeaver AS ABAP / ABAP Platform | Tinggi | 7.7 | CVE-2026-66767 |
| 3750721 | Information Disclosure vulnerability in SAP Web Dispatcher, Internet Communication Manager and SAP Content Server Baharu | SAP Web Dispatcher, Internet Communication Manager and SAP Content Server | Sederhana | 6.5 | CVE-2026-76968 |
| 3756450 | SQL Injection vulnerability in SAP S/4HANA (Intercompany Matching and Reconciliation) Baharu | SAP S/4HANA | Sederhana | 6.5 | CVE-2026-44766 |
| 3786489 | Server-Side Request Forgery in SAP Manufacturing Integration and Intelligence Baharu | SAP Manufacturing Integration and Intelligence | Sederhana | 6.5 | CVE-2026-76971 |
| 3680888 | Information Disclosure vulnerability in SAP Fiori Launchpad BaharuDiterbitkan di luar Hari Tampalan | SAP Fiori Launchpad | Sederhana | 5.3 | CVE-2026-76974 |
| 3365311 | Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management) Baharu | SAP S/4HANA | Sederhana | 4.6 | CVE-2026-76959 |
| 3657599 | Missing Authorization check in SAP S/4HANA (Manage Bank Chains app) Baharu | SAP S/4HANA | Sederhana | 4.3 | CVE-2026-76962 |
| 3772838 | Missing Authorization Check in Application Server ABAP of SAP NetWeaver and ABAP Platform Baharu | SAP NetWeaver AS ABAP / ABAP Platform | Sederhana | 4.3 | CVE-2026-76963 |
| 3783189 | Clickjacking vulnerability in SAPUI5(Frame Options Allowlist) Baharu | SAPUI5 | Sederhana | 4.3 | CVE-2026-76977 |
| 3365276 | Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management) Baharu | SAP S/4HANA | Rendah | 3.5 | CVE-2026-76960 |
| 3371336 | Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management) Baharu | SAP S/4HANA | Rendah | 3.5 | CVE-2026-76961 |
| 3736494 | Denial of Service vulnerability in SAP Process Integration (SOAP Adapter) Baharu | SAP Process Integration | Rendah | 2.2 | CVE-2026-58234 |