<![CDATA[SAP warns of maximum severity 'OVERPASS' kernel vulnerability]]>SAP’s September 2026 security patch batch tackles 20 vulnerabilities across its product lineup, with the spotlight falling on a critical memory corruption issue buried in the SAP Kernel. Tracked as maximum severity, the flaw—dubbed “OVERPASS”—can be triggered by an authenticated attacker, potentially leading to full system compromise or unauthorized privilege escalation. Given the kernel’s central role in running SAP applications, the risk is particularly acute for on-premise deployments where the attack surface is broader.

The update spans several core components, including SAP NetWeaver, SAP S/4HANA, and SAP Business Technology Platform, though the kernel fix takes priority due to its exploitability. SAP has flagged the vulnerability as requiring immediate attention, recommending that administrators review their current kernel patch levels and apply the relevant support package stacks without delay. No workarounds were provided, meaning the patch is the only viable path to remediation.

  • The most critical issue is a kernel-level memory corruption vulnerability, rated 10.0 on the CVSS scale.
  • Other patches address cross-site scripting, information disclosure, and denial-of-service issues, with lower severity ratings.
  • SAP users should check their system’s kernel version against the September 2026 Support Package Stack release notes.

For those running hybrid or cloud environments, SAP notes that some fixes are automatically applied, but on-premise customers must manually deploy the updates. As always, it’s wise to test patches in a sandbox environment before rolling them out to production, given the kernel’s role in system stability.

Source: Unknown

Is your SAP landscape running the latest kernel patch, or are you deferring the update due to change-management constraints?

]]>https://xploitlk.com/topic/263/sap-warns-of-maximum-severity-overpass-kernel-vulnerabilityRSS for NodeSat, 12 Sep 2026 06:09:58 GMTTue, 08 Sep 2026 16:30:27 GMT60