https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 10 Sep 2026 23:39:39 +0000 https://vulnerability.circl.lu/sighting/c4f23f70-8ab2-47a9-b2ab-ffaf29c0339a/export {"uuid": "c4f23f70-8ab2-47a9-b2ab-ffaf29c0339a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-44756", "type": "seen", "source": "https://social.tchncs.de/users/gborn/statuses/117249070441374085", "content": "#SAP toppt mit #Schwachstellen (CVSS Base Score 10.0) zum Sept. 2026 Patchday mal wieder alles - das BSI warnt, patchen, patchen, patchen.\nhttps://borncity.com/blog/2026/09/10/sap-schwachstellen-cve-2026-44756-cvss-10-0-im-sept-2026/", "creation_timestamp": "2026-09-10T22:20:34.576640Z"} {"uuid": "c4f23f70-8ab2-47a9-b2ab-ffaf29c0339a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-44756", "type": "seen", "source": "https://social.tchncs.de/users/gborn/statuses/117249070441374085", "content": "#SAP toppt mit #Schwachstellen (CVSS Base Score 10.0) zum Sept. 2026 Patchday mal wieder alles - das BSI warnt, patchen, patchen, patchen.\nhttps://borncity.com/blog/2026/09/10/sap-schwachstellen-cve-2026-44756-cvss-10-0-im-sept-2026/", "creation_timestamp": "2026-09-10T22:20:34.576640Z"} https://vulnerability.circl.lu/sighting/c4f23f70-8ab2-47a9-b2ab-ffaf29c0339a/export Thu, 10 Sep 2026 22:20:34 +0000 https://vulnerability.circl.lu/sighting/a40d30f6-6f27-4764-be08-966fcff589fd/export {"uuid": "a40d30f6-6f27-4764-be08-966fcff589fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mv6bnph6d52q", "content": "The SAP OVERPASS vulnerability (CVE-2026-44756) scores a perfect CVSS 10.0, letting attackers seize SAP servers before login. Patch Note 3747649 now.\n\n#SAP #OVERPASS #CVE202644756 #CyberSecurity #RCE #Onapsis #InfoSec", "creation_timestamp": "2026-09-10T14:37:14.685463Z"} {"uuid": "a40d30f6-6f27-4764-be08-966fcff589fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mv6bnph6d52q", "content": "The SAP OVERPASS vulnerability (CVE-2026-44756) scores a perfect CVSS 10.0, letting attackers seize SAP servers before login. Patch Note 3747649 now.\n\n#SAP #OVERPASS #CVE202644756 #CyberSecurity #RCE #Onapsis #InfoSec", "creation_timestamp": "2026-09-10T14:37:14.685463Z"} https://vulnerability.circl.lu/sighting/a40d30f6-6f27-4764-be08-966fcff589fd/export Thu, 10 Sep 2026 14:37:14 +0000 https://vulnerability.circl.lu/sighting/df79acc2-8c77-4c5e-9c0d-4cb59867bcab/export {"uuid": "df79acc2-8c77-4c5e-9c0d-4cb59867bcab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mv5gsr2q6j27", "content": "Top 3 CVE for last 7 days:\nCVE-2026-85046: 44 interactions\nCVE-2026-85880: 21 interactions\nCVE-2026-44756: 18 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-85880: 20 interactions\nCVE-2026-85046: 17 interactions\nCVE-2026-87491: 16 interactions\n", "creation_timestamp": "2026-09-10T06:36:53.325481Z"} {"uuid": "df79acc2-8c77-4c5e-9c0d-4cb59867bcab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mv5gsr2q6j27", "content": "Top 3 CVE for last 7 days:\nCVE-2026-85046: 44 interactions\nCVE-2026-85880: 21 interactions\nCVE-2026-44756: 18 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-85880: 20 interactions\nCVE-2026-85046: 17 interactions\nCVE-2026-87491: 16 interactions\n", "creation_timestamp": "2026-09-10T06:36:53.325481Z"} https://vulnerability.circl.lu/sighting/df79acc2-8c77-4c5e-9c0d-4cb59867bcab/export Thu, 10 Sep 2026 06:36:53 +0000 https://vulnerability.circl.lu/sighting/afd13ba5-7a27-4a44-a953-b8e7c1c4bef3/export {"uuid": "afd13ba5-7a27-4a44-a953-b8e7c1c4bef3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mv535dx7ia2k", "content": "CVE-2026-44756: Critical SAP Kernel Flaw Enables Unauthenticated Remote Code Execution\n\n", "creation_timestamp": "2026-09-10T03:08:07.058543Z"} {"uuid": "afd13ba5-7a27-4a44-a953-b8e7c1c4bef3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mv535dx7ia2k", "content": "CVE-2026-44756: Critical SAP Kernel Flaw Enables Unauthenticated Remote Code Execution\n\n", "creation_timestamp": "2026-09-10T03:08:07.058543Z"} https://vulnerability.circl.lu/sighting/afd13ba5-7a27-4a44-a953-b8e7c1c4bef3/export Thu, 10 Sep 2026 03:08:07 +0000 https://vulnerability.circl.lu/sighting/f11c4305-a1b3-49ee-8d4a-a1e587298a53/export {"uuid": "f11c4305-a1b3-49ee-8d4a-a1e587298a53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://cert.europa.eu/publications/security-advisories/2026-011/", "content": "On 8 September 2026, as part of its September Security Patch Day, SAP released Security Notes addressing two critical vulnerabilities affecting a broad range of SAP products[3]. The most severe, CVE-2026-44756 (CVSS 10.0), is a memory corruption vulnerability in SAP Extended Passport (EPP) processing, nicknamed \"OVERPASS\" by the Onapsis Research Labs (ORL), which discovered and responsibly disclosed it[3]. The second, CVE-2026-58240 (CVSS 9.8), nicknamed \"S4GET\", is a missing authentication check in the SAP NetWeaver Message Server[6].\nBoth are remotely exploitable without authentication. According to the reporting researchers, successful exploitation of either can result in arbitrary operating system command execution under the account that owns the SAP installation, leading to full compromise of the affected system and the business data it holds[6].\nCERT-EU strongly recommends applying SAP Security Notes 3747649 and 3759472 as soon as possible.", "creation_timestamp": "2026-09-10T01:00:38.320980Z"} {"uuid": "f11c4305-a1b3-49ee-8d4a-a1e587298a53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://cert.europa.eu/publications/security-advisories/2026-011/", "content": "On 8 September 2026, as part of its September Security Patch Day, SAP released Security Notes addressing two critical vulnerabilities affecting a broad range of SAP products[3]. The most severe, CVE-2026-44756 (CVSS 10.0), is a memory corruption vulnerability in SAP Extended Passport (EPP) processing, nicknamed \"OVERPASS\" by the Onapsis Research Labs (ORL), which discovered and responsibly disclosed it[3]. The second, CVE-2026-58240 (CVSS 9.8), nicknamed \"S4GET\", is a missing authentication check in the SAP NetWeaver Message Server[6].\nBoth are remotely exploitable without authentication. According to the reporting researchers, successful exploitation of either can result in arbitrary operating system command execution under the account that owns the SAP installation, leading to full compromise of the affected system and the business data it holds[6].\nCERT-EU strongly recommends applying SAP Security Notes 3747649 and 3759472 as soon as possible.", "creation_timestamp": "2026-09-10T01:00:38.320980Z"} https://vulnerability.circl.lu/sighting/f11c4305-a1b3-49ee-8d4a-a1e587298a53/export Thu, 10 Sep 2026 01:00:38 +0000 https://vulnerability.circl.lu/sighting/de172644-185e-4be3-b9b1-d6c2c9f31075/export {"uuid": "de172644-185e-4be3-b9b1-d6c2c9f31075", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0356", "content": "SAP heeft kwetsbaarheden verholpen in SAP Extended Passport Protocol (EPP) processing library, SAP NetWeaver Message Server, @sap/cds-mtxs NPM library, SAP GUI for Java, SAP ABAP Development Tools voor SAP NetWeaver AS ABAP, SAP Integration Suite, SAP NetWeaver Business Client, SAP Web Dispatcher, Internet Communication Manager, SAP Content Server, SAP S/4HANA Intercompany Matching and Reconciliation module, en SAP Manufacturing Integration and Intelligence. De kwetsbaarheid met kenmerk CVE-2026-44756 heeft CVSS-score van 10. Het betreft een geheugenveiligheidsprobleem in de EPP processing library dat kan worden geactiveerd door niet-geauthenticeerde aanvallers die malformed EPP headers versturen. Deze geheugenbeschadiging kan leiden tot ongedefinieerd gedrag, wat de vertrouwelijkheid, integriteit en beschikbaarheid van de applicatie kan be\u00efnvloeden. De kwetsbaarheid ontstaat door onjuiste verwerking van EPP headers binnen de SAP EPP processing library. Exploitatie vereist geen authenticatie.\n\nDe kwetsbaarheid met kenmerk CVE-2026-58240 heeft CVSS-score van 9.8. Het betreft het ontbreken van een authenticatiemechanisme bij de registratie van interne applicatieservercomponenten. Hierdoor valideert het systeem niet correct of de componenten legitiem zijn. Een niet-geauthenticeerde aanvaller met netwerktoegang kan hierdoor ongeautoriseerde componenten registreren binnen de Message Server-omgeving. Dit kan leiden tot compromittering van de vertrouwelijkheid, integriteit en beschikbaarheid van de getroffen SAP NetWeaver-systemen.\n\nDe kwetsbaarheid met kenmerk CVE-2026-76969 heeft CVSS-score van 9.4. De kwetsbaarheid maakt het mogelijk voor niet-geauthenticeerde aanvallers om gevoelige credentials te verkrijgen. Dit kan leiden tot ongeautoriseerde toegang en manipulatie van tenantgegevens. De kwetsbaarheid betreft credential disclosure in multitenant CAP-applicaties en be\u00efnvloedt de vertrouwelijkheid, integriteit en beschikbaarheid van de getroffen systemen.\n\nDe kwetsbaarheid met kenmerk CVE-2026-66768 heeft CVSS-score van 9.0. De kwetsbaarheid betreft een onjuiste toegangcontrole en het niet correct afdwingen van trust level policies in SAP GUI for Java. Hierdoor kan een aanvaller met lage privileges willekeurige commando's uitvoeren door misbruik te maken van zwakheden in de backend verwerking van trust policies. Dit be\u00efnvloedt de integriteit van het beveiligingsmodel van het systeem.\n\nDe overige kwetsbaarheden vari\u00ebren in ernst van middelmatig tot hoog en betreffen diverse beveiligingsproblemen zoals:\n\n- niet juist uitvoeren van autorisatiecontroles in SAP ABAP Developer Tools\n- XML External Entity (XXE) in SAP Integration Suite\n- onveilige deserialisatie in SAP NetWeaver Business Client\n- geheugenbeschadiging in SAP NetWeaver Application Server for ABAP en ABAP Platform\n- CRLF-injectie door het gebruik van Jetty-componenten in SAP Commerce Cloud\n- informatielek in SAP Web Dispatcher, Internet Communication Manager en SAP Content Server\n- SQL-injectie in SAP S/4HANA (Intercompany Matching and Reconciliation)\n- Server-Side Request Forgery (SSRF) in SAP Manufacturing Integration and Intelligence\n\nDeze kwetsbaarheden kunnen leiden tot privilege-escalatie, ongeautoriseerde toegang, informatielekken, gegevensmanipulatie en verstoring van de beschikbaarheid. Meerdere kwetsbaarheden kunnen zonder authenticatie worden uitgebuit. De kwetsbaarheden treffen diverse SAP-componenten, waaronder SAP ABAP Developer Tools, SAP Integration Suite, SAP NetWeaver, SAP Commerce Cloud, SAP Web Dispatcher, SAP S/4HANA en SAP Manufacturing Integration and Intelligence.", "creation_timestamp": "2026-09-10T01:00:37.955292Z"} {"uuid": "de172644-185e-4be3-b9b1-d6c2c9f31075", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0356", "content": "SAP heeft kwetsbaarheden verholpen in SAP Extended Passport Protocol (EPP) processing library, SAP NetWeaver Message Server, @sap/cds-mtxs NPM library, SAP GUI for Java, SAP ABAP Development Tools voor SAP NetWeaver AS ABAP, SAP Integration Suite, SAP NetWeaver Business Client, SAP Web Dispatcher, Internet Communication Manager, SAP Content Server, SAP S/4HANA Intercompany Matching and Reconciliation module, en SAP Manufacturing Integration and Intelligence. De kwetsbaarheid met kenmerk CVE-2026-44756 heeft CVSS-score van 10. Het betreft een geheugenveiligheidsprobleem in de EPP processing library dat kan worden geactiveerd door niet-geauthenticeerde aanvallers die malformed EPP headers versturen. Deze geheugenbeschadiging kan leiden tot ongedefinieerd gedrag, wat de vertrouwelijkheid, integriteit en beschikbaarheid van de applicatie kan be\u00efnvloeden. De kwetsbaarheid ontstaat door onjuiste verwerking van EPP headers binnen de SAP EPP processing library. Exploitatie vereist geen authenticatie.\n\nDe kwetsbaarheid met kenmerk CVE-2026-58240 heeft CVSS-score van 9.8. Het betreft het ontbreken van een authenticatiemechanisme bij de registratie van interne applicatieservercomponenten. Hierdoor valideert het systeem niet correct of de componenten legitiem zijn. Een niet-geauthenticeerde aanvaller met netwerktoegang kan hierdoor ongeautoriseerde componenten registreren binnen de Message Server-omgeving. Dit kan leiden tot compromittering van de vertrouwelijkheid, integriteit en beschikbaarheid van de getroffen SAP NetWeaver-systemen.\n\nDe kwetsbaarheid met kenmerk CVE-2026-76969 heeft CVSS-score van 9.4. De kwetsbaarheid maakt het mogelijk voor niet-geauthenticeerde aanvallers om gevoelige credentials te verkrijgen. Dit kan leiden tot ongeautoriseerde toegang en manipulatie van tenantgegevens. De kwetsbaarheid betreft credential disclosure in multitenant CAP-applicaties en be\u00efnvloedt de vertrouwelijkheid, integriteit en beschikbaarheid van de getroffen systemen.\n\nDe kwetsbaarheid met kenmerk CVE-2026-66768 heeft CVSS-score van 9.0. De kwetsbaarheid betreft een onjuiste toegangcontrole en het niet correct afdwingen van trust level policies in SAP GUI for Java. Hierdoor kan een aanvaller met lage privileges willekeurige commando's uitvoeren door misbruik te maken van zwakheden in de backend verwerking van trust policies. Dit be\u00efnvloedt de integriteit van het beveiligingsmodel van het systeem.\n\nDe overige kwetsbaarheden vari\u00ebren in ernst van middelmatig tot hoog en betreffen diverse beveiligingsproblemen zoals:\n\n- niet juist uitvoeren van autorisatiecontroles in SAP ABAP Developer Tools\n- XML External Entity (XXE) in SAP Integration Suite\n- onveilige deserialisatie in SAP NetWeaver Business Client\n- geheugenbeschadiging in SAP NetWeaver Application Server for ABAP en ABAP Platform\n- CRLF-injectie door het gebruik van Jetty-componenten in SAP Commerce Cloud\n- informatielek in SAP Web Dispatcher, Internet Communication Manager en SAP Content Server\n- SQL-injectie in SAP S/4HANA (Intercompany Matching and Reconciliation)\n- Server-Side Request Forgery (SSRF) in SAP Manufacturing Integration and Intelligence\n\nDeze kwetsbaarheden kunnen leiden tot privilege-escalatie, ongeautoriseerde toegang, informatielekken, gegevensmanipulatie en verstoring van de beschikbaarheid. Meerdere kwetsbaarheden kunnen zonder authenticatie worden uitgebuit. De kwetsbaarheden treffen diverse SAP-componenten, waaronder SAP ABAP Developer Tools, SAP Integration Suite, SAP NetWeaver, SAP Commerce Cloud, SAP Web Dispatcher, SAP S/4HANA en SAP Manufacturing Integration and Intelligence.", "creation_timestamp": "2026-09-10T01:00:37.955292Z"} https://vulnerability.circl.lu/sighting/de172644-185e-4be3-b9b1-d6c2c9f31075/export Thu, 10 Sep 2026 01:00:37 +0000 https://vulnerability.circl.lu/sighting/aacf5242-7e60-4e8f-b2d1-d3573281938b/export {"uuid": "aacf5242-7e60-4e8f-b2d1-d3573281938b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://thehackernews.com/2026/09/sap-patches-cvss-100-kernel-flaw.html", "content": "SAP has released security updates to address multiple vulnerabilities, including a maximum-severity flaw in SAP Extended Passport (EPP) Processing that could have a severe impact on the confidentiality, integrity, and availability of the application\n\nThe vulnerability, tracked as CVE-2026-44756 (CVSS score: 10.0), has been described as a case of memory corruption. Discovered and reported by SAP", "creation_timestamp": "2026-09-10T01:00:37.430308Z"} {"uuid": "aacf5242-7e60-4e8f-b2d1-d3573281938b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://thehackernews.com/2026/09/sap-patches-cvss-100-kernel-flaw.html", "content": "SAP has released security updates to address multiple vulnerabilities, including a maximum-severity flaw in SAP Extended Passport (EPP) Processing that could have a severe impact on the confidentiality, integrity, and availability of the application\n\nThe vulnerability, tracked as CVE-2026-44756 (CVSS score: 10.0), has been described as a case of memory corruption. Discovered and reported by SAP", "creation_timestamp": "2026-09-10T01:00:37.430308Z"} https://vulnerability.circl.lu/sighting/aacf5242-7e60-4e8f-b2d1-d3573281938b/export Thu, 10 Sep 2026 01:00:37 +0000 https://vulnerability.circl.lu/sighting/de7164fb-9844-4824-a83b-066b42888994/export {"uuid": "de7164fb-9844-4824-a83b-066b42888994", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "published-proof-of-concept", "source": "Telegram/vBV77s4_8hZ3lw0sfTphsMnJXxgghb9H3gv0Gn2PQWT6_g", "content": "", "creation_timestamp": "2026-09-10T00:00:35.408786Z"} {"uuid": "de7164fb-9844-4824-a83b-066b42888994", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "published-proof-of-concept", "source": "Telegram/vBV77s4_8hZ3lw0sfTphsMnJXxgghb9H3gv0Gn2PQWT6_g", "content": "", "creation_timestamp": "2026-09-10T00:00:35.408786Z"} https://vulnerability.circl.lu/sighting/de7164fb-9844-4824-a83b-066b42888994/export Thu, 10 Sep 2026 00:00:35 +0000 https://vulnerability.circl.lu/sighting/dfc96722-157b-447b-9126-012500894057/export {"uuid": "dfc96722-157b-447b-9126-012500894057", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://t.me/pphm_HackerNews/3056", "content": "\ud83d\udd34 SAP Patches Critical Extended Passport Processing Vulnerability\n\nSAP released 20 new and updated security notes on Tuesday, including one that resolves a critical-severity memory corruption vulnerability.\n\nTracked as CVE-2026-44756 (CVSS score of 10/10), the critical bug is described as a memory corruption issue in Extended Passport (EPP) Processing.\n\nMissing boundary validations during the deserialization of EPP data could trigger unsafe memory behavior during the processing of externally supplied length fields, application security firm Onapsis explains.", "creation_timestamp": "2026-09-10T00:00:12.690812Z"} {"uuid": "dfc96722-157b-447b-9126-012500894057", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://t.me/pphm_HackerNews/3056", "content": "\ud83d\udd34 SAP Patches Critical Extended Passport Processing Vulnerability\n\nSAP released 20 new and updated security notes on Tuesday, including one that resolves a critical-severity memory corruption vulnerability.\n\nTracked as CVE-2026-44756 (CVSS score of 10/10), the critical bug is described as a memory corruption issue in Extended Passport (EPP) Processing.\n\nMissing boundary validations during the deserialization of EPP data could trigger unsafe memory behavior during the processing of externally supplied length fields, application security firm Onapsis explains.", "creation_timestamp": "2026-09-10T00:00:12.690812Z"} https://vulnerability.circl.lu/sighting/dfc96722-157b-447b-9126-012500894057/export Thu, 10 Sep 2026 00:00:12 +0000 https://vulnerability.circl.lu/sighting/0747cca3-9981-4a20-be75-091e29980a23/export {"uuid": "0747cca3-9981-4a20-be75-091e29980a23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://t.me/pphm_HackerNews/3056", "content": "\ud83d\udd34 SAP Patches Critical Extended Passport Processing Vulnerability\n\nSAP released 20 new and updated security notes on Tuesday, including one that resolves a critical-severity memory corruption vulnerability.\n\nTracked as CVE-2026-44756 (CVSS score of 10/10), the critical bug is described as a memory corruption issue in Extended Passport (EPP) Processing.\n\nMissing boundary validations during the deserialization of EPP data could trigger unsafe memory behavior during the processing of externally supplied length fields, application security firm Onapsis explains.", "creation_timestamp": "2026-09-09T20:00:05.619757Z"} {"uuid": "0747cca3-9981-4a20-be75-091e29980a23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://t.me/pphm_HackerNews/3056", "content": "\ud83d\udd34 SAP Patches Critical Extended Passport Processing Vulnerability\n\nSAP released 20 new and updated security notes on Tuesday, including one that resolves a critical-severity memory corruption vulnerability.\n\nTracked as CVE-2026-44756 (CVSS score of 10/10), the critical bug is described as a memory corruption issue in Extended Passport (EPP) Processing.\n\nMissing boundary validations during the deserialization of EPP data could trigger unsafe memory behavior during the processing of externally supplied length fields, application security firm Onapsis explains.", "creation_timestamp": "2026-09-09T20:00:05.619757Z"} https://vulnerability.circl.lu/sighting/0747cca3-9981-4a20-be75-091e29980a23/export Wed, 09 Sep 2026 20:00:05 +0000