CVE-2026-44772

SAP

Overview

Description
-

Social media

Hype score
Not currently trending

  1. Warning: multiple critical code injection, out-of-bounds write in #SAP #commercecloud #netweaver #MII CVE-2026-58231, CVE-2026-44772, CVE-2026-34265 & CVE-2026-44758 CVSS: 10-9.1 The first one is actively exploited #Patch #Patch #Patch

    @CCBalert

    18 Aug 2026

    238 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  2. SAP issued its August 2026 Patch Tuesday release with 28 advisories, four rated Critical. CVE-2026-58231 in SAP Commerce Cloud Data Hub Adapter scores CVSS 10.0 due to authorization bypass. Two code injection flaws (CVE-2026-44772, CVE-2026-44758) affect SAP Manufacturing

    @WorldCyberNewsX

    13 Aug 2026

    4 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  3. SAPの定例セキュリティ更新。SAP Commerce CloudのData Hub AdapterにおけるCVE-2026-58231がCVSSスコア10。SAP Manufacturing Integration and IntelligenceのCVE-2026-44772がCVSSスコア9.9。NetWeaverのメモリ破壊CVE-2026-34265がCVSSスコア9.8。 https://

    @__kokumoto

    12 Aug 2026

    602 Impressions

    0 Retweets

    0 Likes

    1 Bookmark

    0 Replies

    0 Quotes

Related CVEs

  1. Citrix NetScaler Improper Input Validation Vulnerability•CVE-2026-88771
  2. WordPress Core Remote File Inclusion Vulnerability•CVE-2026-87902
  3. @sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applications with extensibility enabled. An unauthenticated attacker could send specially crafted requests to obtain sensitive credentials and abuse them to replace or delete tenant data. Successful exploitation can result in a high impact on availability and integrity of the application. There may also be partial impact to the confidentiality of business data.•CVE-2026-76969
  4. SAP GUI for Java does not correctly enforce the trust level policy for certain functions invoked from a connected backend system. A low-privileged attacker could exploit this weakness by manipulating a connected backend system to trigger affected functionality. This could allow arbitrary command execution on the victim's machine, leading to a high impact on the confidentiality, integrity, and availability of the affected system.•CVE-2026-66768
  5. SAP NetWeaver Message Server does not sufficiently validate the authenticity of internal application server components during registration. An unauthenticated attacker with network access to the affected service could exploit this weakness to register an unauthorized component and potentially perform unauthorized actions within the application environment, resulting in a high impact on the confidentiality, integrity, and availability of the affected system.•CVE-2026-58240

References

Sources include official advisories and independent security research.