SAP June 2026 Patch Day: Four Critical Flaws Including CVSS 9.9 SAML Bypass in NetWeaver ABAP
SAP’s June 2026 Security Patch Day addressed 15 security notes including four critical vulnerabilities. The most severe — CVE-2026-44748 (CVSS 9.9) — is an XML Signature Wrapping flaw in SAP NetWeaver ABAP’s SAML authentication spanning versions 702 to 919. A second critical unauthenticated RCE via RFC (CVE-2026-27671, CVSS 9.8) requires immediate kernel patching.
Itagora tiene in archivio titolo e sommario per la ricerca interna. Il testo completo resta sulla fonte. Il link in uscita non invia referrer.