🔴 Critical: SAP Patches CVSS 10.0 Kernel Flaw Enabling Unauthenticated Remote Code Execution
-
SAP has shipped security updates addressing multiple vulnerabilities, the most severe being a maximum-severity flaw in SAP Extended Passport (EPP) Processing. Tracked as CVE-2026-44756, the issue carries a CVSS score of 10.0, placing it at the top of the severity scale.
The vulnerability is classified as a case of memory corruption, and it carries a critical impact on the confidentiality, integrity, and availability of affected applications. According to the disclosure, the flaw was discovered and reported by SAP itself.
Details on the specific affected versions and the exact patch levels were not provided in the source material, so administrators should consult SAP's official security notes for their deployment to confirm coverage.
- Apply the latest SAP security updates without delay, prioritizing systems exposed to untrusted networks.
- Verify whether SAP Extended Passport (EPP) Processing is enabled or reachable in your environment.
- Monitor for unusual memory-related crashes or unexpected process behavior in SAP services.
- Review SAP's official advisory for patch guidance specific to your product version.
Given the 10.0 rating and the potential for severe impact across the CIA triad, this should be treated as an urgent patching priority for any organization running affected SAP components.
Source: The Hacker News
Does your organization run SAP EPP, and if so, how quickly can you get these patches deployed?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login