CVE Tools
Track your stack

SAP warns of critical flaws in NetWeaver and Commerce Cloud

BleepingComputerBy Sergiu Gatlan

PatchNetWeaver Application Server ABAPApprouter

Our summary

SAP has issued security updates addressing 16 vulnerabilities, including three critical flaws affecting its NetWeaver Application Server ABAP, Approuter, and Commerce Cloud. These include a memory corruption issue (CVE-2026-44747), an HTTP request smuggling flaw (CVE-2026-27690), and a vulnerability due to default credentials (CVE-2026-44761). While no active exploitation has been observed, these flaws could allow unauthorized access, data manipulation, or service disruption. Users are advised to apply the latest patches immediately.

Read at BleepingComputer

BleepingComputer publishes this story on its own site; we link to it rather than reprint it.

  1. The Hacker News⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0-Day and MoreCVE-2026-27690, CVE-2026-44747 +1
  2. The Hacker NewsSAP Patches CVSS 9.9 NetWeaver ABAP Flaw That Could Expose or Modify DataCVE-2026-27690, CVE-2026-44747 +1
  3. SecurityWeekSAP Patches Critical Vulnerabilities in NetWeaver, Approuter, Commerce CloudCVE-2026-27690, CVE-2026-44747 +1
  4. BleepingComputerMax severity SAP Commerce Cloud flaw now targeted in attacksCVE-2026-44761

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store