Securing SAP BTP Applications with the Application Vulnerability Report and Cybersecurity Extension for SAP
Executive Summary Recent vulnerabilities such as PHP2Shell have exposed growing security risks in SAP BTP applications, highlighting the need for automated vulnerability scanning and threat detection. SAP’s Application Vulnerability Report (AVR) addresses these risks by scanning deployed Cloud Foundry applications for known vulnerabilities using OSV and other security intelligence sources. By integrating AVR findings with […]
PHP2Shell: Securing PHP Applications in SAP Environments
Summary The PHP project released security updates on 21 October 2026 for CVE-2026-109618 and CVE-2026-109619. The critical vulnerabilities can enable unauthenticated attackers to execute arbitrary code remotely in vulnerable PHP web runtimes. Successful exploitation could allow an attacker to compromise affected web applications and servers, access data available to the PHP process, disrupt application availability, […]
SAP Security Notes, October 2026
SAP Security Note 3805589 addresses a critical ABAP code injection vulnerability (CVE-2026-89107, CVSS 9.9) affecting the Manage Substitution/Validation Rules functionality in SAP S/4HANA. An authenticated attacker with the required business privileges could submit specially crafted rule definitions that are processed as executable ABAP code, potentially allowing arbitrary code execution and complete compromise of the SAP […]
SAP OVERPASS Update: New Attack Paths Identified and Public Exploit Toolkit Released
SAP OVERPASS (CVE-2026-44756) remains an urgent patching priority for SAP solutions. As reported in our advisory earlier this month, the vulnerability affects the processing of SAP Extended Passport (EPP) data in shared SAP Kernel code. It can enable attackers to execute arbitrary operating system commands with SAP service account privileges by triggering memory corruption through […]
SAP OVERPASS Vulnerability: Protecting SAP Systems from CVE-2026-44756
Summary SAP issued an urgent security update this week to address the critical vulnerability CVE-2026-44756, commonly known as OVERPASS. The vulnerability has the highest possible severity rating, with a CVSS score of 10.0, and affects a wide range of SAP solutions. OVERPASS could enable threat actors to disrupt SAP services, access sensitive information, change system […]
SAP Security Notes, September 2026
SAP Security Note 3747649 addresses CVE-2026-44756, a critical vulnerability known as OVERPASS, affecting SAP Extended Passport (EPP) Processing within the SAP kernel. Extended Passport is a tracing mechanism used by SAP applications and infrastructure components to track requests across distributed SAP landscapes. The vulnerability arises from insufficient boundary validation during the processing of EPP data, […]
Managing Critical Access and Segregation of Duties Risks in SAP S/4HANA
Summary This article examines the challenges of access governance in SAP S/4HANA, the role of solutions such as SAP GRC Access Control in automating risk analysis, and the limitations organizations often face when interpreting and remediating access risks. It also explores how the Cybersecurity Extension for SAP (CES) enhances access risk management through more than […]
SAP Security Notes, August 2026
SAP Security Note 3714806 patches a critical memory corruption vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform, tracked as CVE-2026-34265 with a CVSS score of 9.8. An unauthenticated remote attacker can exploit improper boundary validation in DIAG protocol parsing to corrupt memory, potentially disclose sensitive information, affect system integrity, or cause system crashes. […]
Securing the SAP Foundation: Protecting SUSE Linux Enterprise Server for SAP Applications
Executive Summary Operating-system security is a critical component of protecting SAP S/4HANA and SAP HANA environments, particularly where workloads run on SUSE Linux Enterprise Server. Weak permissions, unnecessary services, insecure remote access, missing patches, exposed ports, and inadequate logging can allow attackers to bypass application-level controls and compromise critical SAP resources. These weaknesses can also […]
SAP Security Notes, July 2026
Hot news note 3747367 addresses a critical memory corruption vulnerability in SAP NetWeaver Application Server ABAP, tracked as CVE-2026-44747. An authenticated attacker could exploit faulty memory-management logic to perform an out-of-bounds stack write, potentially gaining unauthorized access to data, modifying information, or causing system unavailability. The vulnerability therefore has a high impact on confidentiality, integrity, […]