{"vulnerability": "CVE-2026-4475", "sightings": [{"uuid": "d9ccae45-4698-443f-a6dc-a12793a932a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4475", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjkgnidlg26", "content": "", "creation_timestamp": "2026-03-20T22:20:55.809363Z"}, {"uuid": "2a83e262-f81e-4e2c-9e30-bc1633ebc7e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44757", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mntfia5xzm2s", "content": "CVE-2026-44757 - Cross-Site Scripting (XSS) vulnerability in SAP Wily Introscope Enterprise Manager\nCVE ID : CVE-2026-44757\n \n Published : 9 juin 2026 01:16 | 1\u00a0heure, 29\u00a0minutes ago\n \n Description : SAP Wily Introscope Enterprise Manager allows an unauthenticated attacker to ...", "creation_timestamp": "2026-06-09T04:50:06.987680Z"}, {"uuid": "3ac9fc87-352e-49a4-8fcf-a69bbb38e9c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44751", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mntg272jht2p", "content": "CVE-2026-44751 - Missing Authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform\nCVE ID : CVE-2026-44751\n \n Published : 9 juin 2026 01:16 | 1\u00a0heure, 29\u00a0minutes ago\n \n Description : Application server ABAP does not perform necessary authorization check...", "creation_timestamp": "2026-06-09T05:00:09.667964Z"}, {"uuid": "55831bd9-8f1d-4615-a11e-d79c8f980653", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-44751", "type": "seen", "source": "https://www.acn.gov.it/portale/w/sap-security-patch-day-17", "content": "", "creation_timestamp": "2026-06-09T01:20:31.000000Z"}, {"uuid": "78dae1af-7d7c-49c3-ac21-9eb5d3571a25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44750", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnu76qz3un2z", "content": "\ud83d\udd17 CVE : CVE-2025-68161, CVE-2026-22732, CVE-2026-24315, CVE-2026-27671, CVE-2026-29145, CVE-2026-40128, CVE-2026-44743, CVE-2026-44744, CVE-2026-44746, CVE-2026-44748, CVE-2026-44750, CVE-2026-44751, CVE-2026-44754, CVE-2026-44755, CVE-2026-44757", "creation_timestamp": "2026-06-09T12:30:10.197545Z"}, {"uuid": "e1e761e8-5515-402e-b166-33150d209b37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44751", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnu76qz3un2z", "content": "\ud83d\udd17 CVE : CVE-2025-68161, CVE-2026-22732, CVE-2026-24315, CVE-2026-27671, CVE-2026-29145, CVE-2026-40128, CVE-2026-44743, CVE-2026-44744, CVE-2026-44746, CVE-2026-44748, CVE-2026-44750, CVE-2026-44751, CVE-2026-44754, CVE-2026-44755, CVE-2026-44757", "creation_timestamp": "2026-06-09T12:30:10.416868Z"}, {"uuid": "b1bd3e81-5873-4829-8794-a3941a906dc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44754", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnu76qz3un2z", "content": "\ud83d\udd17 CVE : CVE-2025-68161, CVE-2026-22732, CVE-2026-24315, CVE-2026-27671, CVE-2026-29145, CVE-2026-40128, CVE-2026-44743, CVE-2026-44744, CVE-2026-44746, CVE-2026-44748, CVE-2026-44750, CVE-2026-44751, CVE-2026-44754, CVE-2026-44755, CVE-2026-44757", "creation_timestamp": "2026-06-09T12:30:10.570223Z"}, {"uuid": "a7c34013-57cf-43b2-a6f1-49334547f8a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44755", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnu76qz3un2z", "content": "\ud83d\udd17 CVE : CVE-2025-68161, CVE-2026-22732, CVE-2026-24315, CVE-2026-27671, CVE-2026-29145, CVE-2026-40128, CVE-2026-44743, CVE-2026-44744, CVE-2026-44746, CVE-2026-44748, CVE-2026-44750, CVE-2026-44751, CVE-2026-44754, CVE-2026-44755, CVE-2026-44757", "creation_timestamp": "2026-06-09T12:30:10.732708Z"}, {"uuid": "d8b74064-8294-4f37-bf23-c4561ad517dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44757", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnu76qz3un2z", "content": "\ud83d\udd17 CVE : CVE-2025-68161, CVE-2026-22732, CVE-2026-24315, CVE-2026-27671, CVE-2026-29145, CVE-2026-40128, CVE-2026-44743, CVE-2026-44744, CVE-2026-44746, CVE-2026-44748, CVE-2026-44750, CVE-2026-44751, CVE-2026-44754, CVE-2026-44755, CVE-2026-44757", "creation_timestamp": "2026-06-09T12:30:10.879111Z"}, {"uuid": "a7cdd202-fd74-499e-9678-fe461d72281a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-44758", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0998", "content": "", "creation_timestamp": "2026-08-13T08:47:40.573081Z"}, {"uuid": "4886c9ec-f4bc-4c02-a26d-304c4463f723", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44758", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msrhducgo52v", "content": "CVE-2026-44758\nAn attacker with high privileges can execute arbitrary commands on the SAP MII system, potentially leading to unauthorized access or system crashes. This affects SAP MII users who rely on the system for\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-11T01:24:06.473549Z"}, {"uuid": "a3502d06-49ab-4b6e-ad62-40a1af156ae9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-44758", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117074285629016309", "content": "SAP MII 15.5 is exposed to CRITICAL code injection (CVE-2026-44758, CVSS 9.1). High-privilege users could execute arbitrary OS commands. No patch yet \u2014 restrict access & monitor for code injection. https://radar.offseq.com/threat/cve-2026-44758-cwe-94-improper-control-of-generation-of-code-in-sapse-sap-manufacturing-integration-a0b460ddbf734b9d #OffSeq #SAP #Infosec #CVE202644758", "creation_timestamp": "2026-08-11T01:30:29.743735Z"}, {"uuid": "8ddd6749-e622-4cc2-9d3b-6564f005c80b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-44758", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msrhpd7po32n", "content": "Critical (CVSS 9.1) code injection in SAP MII 15.5 lets high-privilege users run OS commands. No patch \u2014 restrict privileged access and monitor for abuse. https://radar.offseq.com/threat/cve-2026-44758-cwe-94-improper-control-of-generation-of-code-in-sapse-sap-manufacturing-integration-a0b460ddbf...", "creation_timestamp": "2026-08-11T01:30:32.281922Z"}, {"uuid": "2fd2a7cc-6d49-433f-82f9-28964f9fb4b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44758", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msrmr5dyq72h", "content": "\ud83d\udd34 CVE-2026-44758 - Critical (9.1)\n\nSAP Manufacturing Integration and Intelligence (MII) allows an attacker with high privileges to s...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44758/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-11T03:01:01.337809Z"}, {"uuid": "560c1632-1434-479f-882e-2d80946d6ad3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44758", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3msrnmvucrn2t", "content": "SAP MII Gets Blindsided Again, Because Privilege Means Nothing Here\nPANIC 78% | Lag 0.0h | CVE-2026-44758 lets an attacker with high privileges execute arbitrary commands on SAP MII, which ca\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-11T03:16:33.079752Z"}, {"uuid": "4ba8eccb-726c-49bf-84d3-1d54ac400dbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44759", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mql3g6rvz52z", "content": "CVE-2026-44759 - Cross Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal\nCVE ID : CVE-2026-44759\n \n Published : July 14, 2026, 1:16 a.m. | 14\u00a0minutes ago\n \n Description : SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious...", "creation_timestamp": "2026-07-14T01:44:17.998444Z"}, {"uuid": "55a6f0d6-5f60-4cc6-81cc-d74868e62141", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44752", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mql3zob6f72l", "content": "CVE-2026-44752 - Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server Java(Configuration Wizard)\nCVE ID : CVE-2026-44752\n \n Published : July 14, 2026, 1:16 a.m. | 14\u00a0minutes ago\n \n Description : SAP NetWeaver Application Server Java allows an unauthenti...", "creation_timestamp": "2026-07-14T01:55:11.631830Z"}, {"uuid": "001a0678-156f-4210-8567-4955cd18caa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44753", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mql5k766as2k", "content": "CVE-2026-44753 - Information Disclosure vulnerability in SAP HANA Extended Application Services classic model (User Self Service)\nCVE ID : CVE-2026-44753\n \n Published : July 14, 2026, 1:16 a.m. | 14\u00a0minutes ago\n \n Description : SAP HANA Database (user self service tools) allow...", "creation_timestamp": "2026-07-14T02:22:20.130412Z"}, {"uuid": "936543ef-cf39-4759-a49d-a23e00db1017", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44752", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqljr5klm42c", "content": "\ud83d\udfe0 CVE-2026-44752 - High (8.2)\n\nSAP NetWeaver Application Server Java allows an unauthenticated attacker to inject malicious Java...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44752/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-14T06:00:59.337574Z"}, {"uuid": "4e14ebc4-ec5a-4ad2-a5ce-c2ad03bf8d0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muy5b3xae72o", "content": "\ud83d\udd34 CVE-2026-44756 - Critical (10)\n\nA memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44756/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-08T04:02:38.776906Z"}, {"uuid": "e700ec84-bcb5-4394-96bb-e5baf68482ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3muxsetw6fn2t", "content": "CVE-2026-44756: SAP SE has disclosed a critical memory corruption flaw in its Extended Passport (EPP) processing library, rated CVSS 10.0, that an unauthenticated attacker could trigger over the network. SAP has released a fix; apply it.", "creation_timestamp": "2026-09-08T00:47:52.636224Z"}, {"uuid": "73a9c1d7-bec9-4485-a714-ea0b853cc606", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117232688633335518", "content": "There is a new vulnerability with elevated criticality in SAP Extended Passport Processing (CVE-2026-44756) https://vuldb.com/vuln/399706", "creation_timestamp": "2026-09-08T00:54:27.535742Z"}, {"uuid": "6b649697-43fa-4a5a-aa8b-448735afa4e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3muxt7smpki2b", "content": "\u26a0\ufe0f PATCH NOW\n\nSAP shipped a CVSS 10 fix for CVE-2026-44756: an unauthenticated memory-corruption bug in its Extended Passport request handling.\n\nIt can crash the SAP kernel and Web Dispatcher. Apply the kernel patch now, internet-facing systems first.", "creation_timestamp": "2026-09-08T01:02:57.760825Z"}, {"uuid": "7a254bb0-9445-47ab-a60b-d7d7349f09b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muxwsrfvxc2j", "content": "\ud83d\udea8 CVE-2026-44756 \u2014 CVSS 10 CRITICAL\n\nA memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Under spec...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-44756\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T02:07:14.625501Z"}, {"uuid": "64a44d88-4f1b-4e50-934b-01cb9ecbb072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3muxwwxqocf2n", "content": "\ud83d\udea8 CVE-2026-44756 \u2014 CVSS 10 CRITICAL\n\nA memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Under spec...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-44756\n\n#CVE #PotatoSecurity #InfoSec", "creation_timestamp": "2026-09-08T02:09:39.043979Z"}, {"uuid": "61b417e5-b69c-41b5-bf5b-f122e29245f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3muy66gpv3g23", "content": "EPP\u30e9\u30a4\u30d6\u30e9\u30ea\u306b\u30e1\u30e2\u30ea\u5b89\u5168\u6027\u306e\u8106\u5f31\u6027\u3002\u7d30\u5de5\u3055\u308c\u305f\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u8981\u6c42\u3067\u7570\u5e38\u7d42\u4e86\u306e\u53ef\u80fd\u6027\u3002\u6a5f\u5bc6\u6027\u3001\u5b8c\u5168\u6027\u3001\u53ef\u7528\u6027\u306b\u5f71\u97ff\u3002\nCVE-2026-44756 CVSS 10.0 | CRITICAL", "creation_timestamp": "2026-09-08T04:19:02.355835Z"}, {"uuid": "eb47c22b-5c78-4aca-b9be-5b4c2681a9f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://bsky.app/profile/campuscodi.risky.biz/post/3muzaiu74y22h", "content": "OVERPASS is an unauth RCE in the SAP kernel (CVE-2026-44756) and S4GET is a preauth RCE in the SAP NetWeaver's Message Server (CVE-2026-58240).\n\nBoth have a very high CVSS and are likely to be exploited.\n\nonapsis.com/blog/sap-ove...\n\nonapsis.com/blog/s4get-c...", "creation_timestamp": "2026-09-08T14:33:21.251015Z"}, {"uuid": "fa672474-3625-4582-a283-137261222f4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3muyk464xpl26", "content": "The September 2026 SAP Security Patch Day resolves 20 flaws. Apply these SAP Security Patch Day updates to fix CVE-2026-44756 and secure your environment.\n\n#SAPSecurityPatchDay #CVE202644756 #SAPSecurity #CyberSecurity #Vulnerability", "creation_timestamp": "2026-09-08T07:52:31.094608Z"}, {"uuid": "dc690ba5-cde6-4de1-b35c-917c8d01a065", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muylni5ch62g", "content": "CVE-2026-44756 - sap extended passport (epp) processing\nThe SAP Extended Passport component may stop working if it receives a specially crafted network request. An attacker who can send such a request could cause the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sapse #CVE #infosec", "creation_timestamp": "2026-09-08T08:20:05.678294Z"}, {"uuid": "89f0d8e1-04bf-4b15-bc12-5c86dd1a649f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://bsky.app/profile/allaboutsecurity.bsky.social/post/3muz4efjqik24", "content": "OVERPASS: SAP-Kernel-Schwachstelle CVE-2026-44756 erfordert sofortiges Patchen - CVSS-Bewertung: 10,0 (h\u00f6chste Stufe) | Handlungsbedarf: sofort\nwww.all-about-security.de/overpass-sap...\n\n#sap #sapsecurity", "creation_timestamp": "2026-09-08T13:19:20.526954Z"}, {"uuid": "062649fa-e4a2-4712-be4c-d91e6c23832a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv23m2zpks2z", "content": "\ud83d\udd34 SAP OVERPASS \u2014 CVSS 10.0\n\nCVE-2026-44756 is a critical pre-auth SAP Kernel flaw that can lead to remote OS command execution. Patch available; no exploitation observed yet.\n\nstemshop.top/blog/sap-ove...\n\n#CVE #CVE202644756 #SAP #OVERPASS #RCE #CyberSecurity", "creation_timestamp": "2026-09-08T22:38:22.287189Z"}, {"uuid": "20142711-23cb-4d8b-b96a-3ff990e20a4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mv2weykaqf2p", "content": "Top 3 CVE for last 7 days:\nCVE-2026-85046: 27 interactions\nCVE-2026-83548: 19 interactions\nCVE-2026-44756: 18 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-44756: 18 interactions\nCVE-2026-75650: 12 interactions\nCVE-2026-58240: 11 interactions\n", "creation_timestamp": "2026-09-09T06:37:31.487887Z"}, {"uuid": "56493b90-3469-49cb-a103-0ff0b703859f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mv37nonlka27", "content": "CVE-2026-44756 (OVERPASS) is a remotely exploitable, unauthenticated SAP kernel memory corruption flaw in EPP processing that enables arbitrary OS command execution with SAP admin privileges.\n", "creation_timestamp": "2026-09-09T09:23:27.180831Z"}, {"uuid": "db3c8af5-e412-4ee3-9a0f-76d502a5df43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mv37pt27uk2g", "content": "CVE-2026-44756 (OVERPASS) is a remotely exploitable, unauthenticated SAP kernel memory corruption flaw in EPP processing that enables arbitrary OS command execution with SAP admin privileges.\n", "creation_timestamp": "2026-09-09T09:24:40.187670Z"}, {"uuid": "33f50424-ceb9-4545-b558-2d4141f0defc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mv37qp7nrh2a", "content": "CVE-2026-44756 (OVERPASS) is a remotely exploitable, unauthenticated SAP kernel memory corruption flaw in EPP processing that enables arbitrary OS command execution with SAP admin privileges.\n", "creation_timestamp": "2026-09-09T09:25:08.371238Z"}, {"uuid": "d4a44ab8-bf08-4aee-b1f9-66402bbc7bbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/117241084578344122", "content": "The vulnerability, tracked as CVE-2026-44756 (CVSS score: 10.0), has been described as a case of memory corruption. Discovered and reported by SAP security company Onapsis, it has been codenamed OVERPASS. https://thehackernews.com/2026/09/sap-patches-cvss-100-kernel-flaw.html", "creation_timestamp": "2026-09-09T12:29:39.612845Z"}, {"uuid": "c3a9e060-8dea-4af4-be9f-6c1fc8c2088c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3mv3k37d3oc2j", "content": "The vulnerability, tracked as CVE-2026-44756 (CVSS score: 10.0), has been described as a case of memory corruption. Discovered and reported by SAP security company Onapsis, it has been codenamed OVERPASS. thehackernews.com/2026/09/sap-...", "creation_timestamp": "2026-09-09T12:29:58.880772Z"}, {"uuid": "610a74b6-0c04-459e-9f56-a5c1401e65eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-44756", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mv3kbqrs6e2c", "content": "SAP OVERPASS CVE-2026-44756: CVSS 10.0 Kernel RCE\u00a0Explained\n\nSAP OVERPASS CVE-2026-44756 is a CVSS 10.0 kernel flaw enabling unauthenticated RCE. Learn the attack path, S4GET risks and patching steps...\n\nhttps://thecybersecguru.com/news/sap-overpass-cve-2026-44756/", "creation_timestamp": "2026-09-09T12:33:38.219472Z"}, {"uuid": "07a66919-fd45-40f7-bd8a-e7e5e2953d0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://thehackernews.com/2026/09/sap-patches-cvss-100-kernel-flaw.html", "content": "SAP has released security updates to address multiple vulnerabilities, including a maximum-severity flaw in SAP Extended Passport (EPP) Processing that could have a severe impact on the confidentiality, integrity, and availability of the application\n\nThe vulnerability, tracked as CVE-2026-44756 (CVSS score: 10.0), has been described as a case of memory corruption. Discovered and reported by SAP", "creation_timestamp": "2026-09-09T13:03:19.627464Z"}, {"uuid": "f145d159-8a22-4b8d-a9b5-76b89c2dd7fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mv3md6rrei2w", "content": "\ud83e\udd16 SAP patches CVE-2026-44756 (CVSS 10.0): memory corruption in EPP Processing lets unauthenticated attackers execute code remotely. Applies to all supported SAP systems, patch immediately.\nhttps://thehackernews.com/2026/09/sap-patches-cvss-100-kernel-flaw.html", "creation_timestamp": "2026-09-09T13:10:13.338715Z"}, {"uuid": "9860d420-886f-4874-854d-f72dbb36fbb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://bsky.app/profile/uutis.bsky.social/post/3mv3nqj45k62j", "content": "SAP julkaisi 9. syyskuuta korjauksia kahteen kriittiseen haavoittuvuuteen: CVE-2026-44756 \"OVERPASS\" (CVSS 10.0) SAP Kerneliss\u00e4 ja CVE-2026-58240 \"S4GET\" (CVSS 9.8) NetWeaver Message Serveriss\u00e4.\n\n#kyberturvallisuus", "creation_timestamp": "2026-09-09T13:35:34.986087Z"}, {"uuid": "c868bcbe-1f72-418f-a3c4-01dbd258c2ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "published-proof-of-concept", "source": "Telegram/vBV77s4_8hZ3lw0sfTphsMnJXxgghb9H3gv0Gn2PQWT6_g", "content": "", "creation_timestamp": "2026-09-09T16:00:06.999247Z"}, {"uuid": "d2719e2e-6058-4f77-8630-89678191c4a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mv3vx6z4l32r", "content": "~Certeu~\nUnauthenticated remote exploitation enables OS command execution; patch SAP Notes 3747649 and 3759472.\n-\nIOCs: CVE-2026-44756, CVE-2026-58240\n-\n#CVE #SAP #ThreatIntel", "creation_timestamp": "2026-09-09T16:02:28.161710Z"}, {"uuid": "edf6c9a9-33ea-412f-aaa8-acb6dd4247fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0356", "content": "SAP heeft kwetsbaarheden verholpen in SAP Extended Passport Protocol (EPP) processing library, SAP NetWeaver Message Server, @sap/cds-mtxs NPM library, SAP GUI for Java, SAP ABAP Development Tools voor SAP NetWeaver AS ABAP, SAP Integration Suite, SAP NetWeaver Business Client, SAP Web Dispatcher, Internet Communication Manager, SAP Content Server, SAP S/4HANA Intercompany Matching and Reconciliation module, en SAP Manufacturing Integration and Intelligence. De kwetsbaarheid met kenmerk CVE-2026-44756 heeft CVSS-score van 10. Het betreft een geheugenveiligheidsprobleem in de EPP processing library dat kan worden geactiveerd door niet-geauthenticeerde aanvallers die malformed EPP headers versturen. Deze geheugenbeschadiging kan leiden tot ongedefinieerd gedrag, wat de vertrouwelijkheid, integriteit en beschikbaarheid van de applicatie kan be\u00efnvloeden. De kwetsbaarheid ontstaat door onjuiste verwerking van EPP headers binnen de SAP EPP processing library. Exploitatie vereist geen authenticatie.\n\nDe kwetsbaarheid met kenmerk CVE-2026-58240 heeft CVSS-score van 9.8. Het betreft het ontbreken van een authenticatiemechanisme bij de registratie van interne applicatieservercomponenten. Hierdoor valideert het systeem niet correct of de componenten legitiem zijn. Een niet-geauthenticeerde aanvaller met netwerktoegang kan hierdoor ongeautoriseerde componenten registreren binnen de Message Server-omgeving. Dit kan leiden tot compromittering van de vertrouwelijkheid, integriteit en beschikbaarheid van de getroffen SAP NetWeaver-systemen.\n\nDe kwetsbaarheid met kenmerk CVE-2026-76969 heeft CVSS-score van 9.4. De kwetsbaarheid maakt het mogelijk voor niet-geauthenticeerde aanvallers om gevoelige credentials te verkrijgen. Dit kan leiden tot ongeautoriseerde toegang en manipulatie van tenantgegevens. De kwetsbaarheid betreft credential disclosure in multitenant CAP-applicaties en be\u00efnvloedt de vertrouwelijkheid, integriteit en beschikbaarheid van de getroffen systemen.\n\nDe kwetsbaarheid met kenmerk CVE-2026-66768 heeft CVSS-score van 9.0. De kwetsbaarheid betreft een onjuiste toegangcontrole en het niet correct afdwingen van trust level policies in SAP GUI for Java. Hierdoor kan een aanvaller met lage privileges willekeurige commando's uitvoeren door misbruik te maken van zwakheden in de backend verwerking van trust policies. Dit be\u00efnvloedt de integriteit van het beveiligingsmodel van het systeem.\n\nDe overige kwetsbaarheden vari\u00ebren in ernst van middelmatig tot hoog en betreffen diverse beveiligingsproblemen zoals:\n\n- niet juist uitvoeren van autorisatiecontroles in SAP ABAP Developer Tools\n- XML External Entity (XXE) in SAP Integration Suite\n- onveilige deserialisatie in SAP NetWeaver Business Client\n- geheugenbeschadiging in SAP NetWeaver Application Server for ABAP en ABAP Platform\n- CRLF-injectie door het gebruik van Jetty-componenten in SAP Commerce Cloud\n- informatielek in SAP Web Dispatcher, Internet Communication Manager en SAP Content Server\n- SQL-injectie in SAP S/4HANA (Intercompany Matching and Reconciliation)\n- Server-Side Request Forgery (SSRF) in SAP Manufacturing Integration and Intelligence\n\nDeze kwetsbaarheden kunnen leiden tot privilege-escalatie, ongeautoriseerde toegang, informatielekken, gegevensmanipulatie en verstoring van de beschikbaarheid. Meerdere kwetsbaarheden kunnen zonder authenticatie worden uitgebuit. De kwetsbaarheden treffen diverse SAP-componenten, waaronder SAP ABAP Developer Tools, SAP Integration Suite, SAP NetWeaver, SAP Commerce Cloud, SAP Web Dispatcher, SAP S/4HANA en SAP Manufacturing Integration and Intelligence.", "creation_timestamp": "2026-09-09T16:02:38.909976Z"}, {"uuid": "8c865420-0fb5-4600-9cd0-8cf409251e9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://cert.europa.eu/publications/security-advisories/2026-011/", "content": "On 8 September 2026, as part of its September Security Patch Day, SAP released Security Notes addressing two critical vulnerabilities affecting a broad range of SAP products[3]. The most severe, CVE-2026-44756 (CVSS 10.0), is a memory corruption vulnerability in SAP Extended Passport (EPP) processing, nicknamed \"OVERPASS\" by the Onapsis Research Labs (ORL), which discovered and responsibly disclosed it[3]. The second, CVE-2026-58240 (CVSS 9.8), nicknamed \"S4GET\", is a missing authentication check in the SAP NetWeaver Message Server[6].\nBoth are remotely exploitable without authentication. According to the reporting researchers, successful exploitation of either can result in arbitrary operating system command execution under the account that owns the SAP installation, leading to full compromise of the affected system and the business data it holds[6].\nCERT-EU strongly recommends applying SAP Security Notes 3747649 and 3759472 as soon as possible.", "creation_timestamp": "2026-09-09T16:02:39.218172Z"}, {"uuid": "a8933969-3981-4195-b190-aa83d0f807cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-44756", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mv3w6u7rot2h", "content": "\ud83d\udcf0 SAP Peringatkan Kerentanan Kernel OVERPASS dengan Tingkat Keparahan Maksimum\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/09/sap-peringatkan-kerentanan-kernel-overpass-cve-2026-44756/\n\n#cybersecurity #dataBreach #keamanan #keamananSiber #sap #teknologi #vulnerability", "creation_timestamp": "2026-09-09T16:06:45.956577Z"}, {"uuid": "0747cca3-9981-4a20-be75-091e29980a23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://t.me/pphm_HackerNews/3056", "content": "\ud83d\udd34 SAP Patches Critical Extended Passport Processing Vulnerability\n\nSAP released 20 new and updated security notes on Tuesday, including one that resolves a critical-severity memory corruption vulnerability.\n\nTracked as CVE-2026-44756 (CVSS score of 10/10), the critical bug is described as a memory corruption issue in Extended Passport (EPP) Processing.\n\nMissing boundary validations during the deserialization of EPP data could trigger unsafe memory behavior during the processing of externally supplied length fields, application security firm Onapsis explains.", "creation_timestamp": "2026-09-09T20:00:05.619757Z"}, {"uuid": "dfc96722-157b-447b-9126-012500894057", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://t.me/pphm_HackerNews/3056", "content": "\ud83d\udd34 SAP Patches Critical Extended Passport Processing Vulnerability\n\nSAP released 20 new and updated security notes on Tuesday, including one that resolves a critical-severity memory corruption vulnerability.\n\nTracked as CVE-2026-44756 (CVSS score of 10/10), the critical bug is described as a memory corruption issue in Extended Passport (EPP) Processing.\n\nMissing boundary validations during the deserialization of EPP data could trigger unsafe memory behavior during the processing of externally supplied length fields, application security firm Onapsis explains.", "creation_timestamp": "2026-09-10T00:00:12.690812Z"}, {"uuid": "de7164fb-9844-4824-a83b-066b42888994", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "published-proof-of-concept", "source": "Telegram/vBV77s4_8hZ3lw0sfTphsMnJXxgghb9H3gv0Gn2PQWT6_g", "content": "", "creation_timestamp": "2026-09-10T00:00:35.408786Z"}, {"uuid": "aacf5242-7e60-4e8f-b2d1-d3573281938b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://thehackernews.com/2026/09/sap-patches-cvss-100-kernel-flaw.html", "content": "SAP has released security updates to address multiple vulnerabilities, including a maximum-severity flaw in SAP Extended Passport (EPP) Processing that could have a severe impact on the confidentiality, integrity, and availability of the application\n\nThe vulnerability, tracked as CVE-2026-44756 (CVSS score: 10.0), has been described as a case of memory corruption. Discovered and reported by SAP", "creation_timestamp": "2026-09-10T01:00:37.430308Z"}, {"uuid": "de172644-185e-4be3-b9b1-d6c2c9f31075", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0356", "content": "SAP heeft kwetsbaarheden verholpen in SAP Extended Passport Protocol (EPP) processing library, SAP NetWeaver Message Server, @sap/cds-mtxs NPM library, SAP GUI for Java, SAP ABAP Development Tools voor SAP NetWeaver AS ABAP, SAP Integration Suite, SAP NetWeaver Business Client, SAP Web Dispatcher, Internet Communication Manager, SAP Content Server, SAP S/4HANA Intercompany Matching and Reconciliation module, en SAP Manufacturing Integration and Intelligence. De kwetsbaarheid met kenmerk CVE-2026-44756 heeft CVSS-score van 10. Het betreft een geheugenveiligheidsprobleem in de EPP processing library dat kan worden geactiveerd door niet-geauthenticeerde aanvallers die malformed EPP headers versturen. Deze geheugenbeschadiging kan leiden tot ongedefinieerd gedrag, wat de vertrouwelijkheid, integriteit en beschikbaarheid van de applicatie kan be\u00efnvloeden. De kwetsbaarheid ontstaat door onjuiste verwerking van EPP headers binnen de SAP EPP processing library. Exploitatie vereist geen authenticatie.\n\nDe kwetsbaarheid met kenmerk CVE-2026-58240 heeft CVSS-score van 9.8. Het betreft het ontbreken van een authenticatiemechanisme bij de registratie van interne applicatieservercomponenten. Hierdoor valideert het systeem niet correct of de componenten legitiem zijn. Een niet-geauthenticeerde aanvaller met netwerktoegang kan hierdoor ongeautoriseerde componenten registreren binnen de Message Server-omgeving. Dit kan leiden tot compromittering van de vertrouwelijkheid, integriteit en beschikbaarheid van de getroffen SAP NetWeaver-systemen.\n\nDe kwetsbaarheid met kenmerk CVE-2026-76969 heeft CVSS-score van 9.4. De kwetsbaarheid maakt het mogelijk voor niet-geauthenticeerde aanvallers om gevoelige credentials te verkrijgen. Dit kan leiden tot ongeautoriseerde toegang en manipulatie van tenantgegevens. De kwetsbaarheid betreft credential disclosure in multitenant CAP-applicaties en be\u00efnvloedt de vertrouwelijkheid, integriteit en beschikbaarheid van de getroffen systemen.\n\nDe kwetsbaarheid met kenmerk CVE-2026-66768 heeft CVSS-score van 9.0. De kwetsbaarheid betreft een onjuiste toegangcontrole en het niet correct afdwingen van trust level policies in SAP GUI for Java. Hierdoor kan een aanvaller met lage privileges willekeurige commando's uitvoeren door misbruik te maken van zwakheden in de backend verwerking van trust policies. Dit be\u00efnvloedt de integriteit van het beveiligingsmodel van het systeem.\n\nDe overige kwetsbaarheden vari\u00ebren in ernst van middelmatig tot hoog en betreffen diverse beveiligingsproblemen zoals:\n\n- niet juist uitvoeren van autorisatiecontroles in SAP ABAP Developer Tools\n- XML External Entity (XXE) in SAP Integration Suite\n- onveilige deserialisatie in SAP NetWeaver Business Client\n- geheugenbeschadiging in SAP NetWeaver Application Server for ABAP en ABAP Platform\n- CRLF-injectie door het gebruik van Jetty-componenten in SAP Commerce Cloud\n- informatielek in SAP Web Dispatcher, Internet Communication Manager en SAP Content Server\n- SQL-injectie in SAP S/4HANA (Intercompany Matching and Reconciliation)\n- Server-Side Request Forgery (SSRF) in SAP Manufacturing Integration and Intelligence\n\nDeze kwetsbaarheden kunnen leiden tot privilege-escalatie, ongeautoriseerde toegang, informatielekken, gegevensmanipulatie en verstoring van de beschikbaarheid. Meerdere kwetsbaarheden kunnen zonder authenticatie worden uitgebuit. De kwetsbaarheden treffen diverse SAP-componenten, waaronder SAP ABAP Developer Tools, SAP Integration Suite, SAP NetWeaver, SAP Commerce Cloud, SAP Web Dispatcher, SAP S/4HANA en SAP Manufacturing Integration and Intelligence.", "creation_timestamp": "2026-09-10T01:00:37.955292Z"}, {"uuid": "f11c4305-a1b3-49ee-8d4a-a1e587298a53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://cert.europa.eu/publications/security-advisories/2026-011/", "content": "On 8 September 2026, as part of its September Security Patch Day, SAP released Security Notes addressing two critical vulnerabilities affecting a broad range of SAP products[3]. The most severe, CVE-2026-44756 (CVSS 10.0), is a memory corruption vulnerability in SAP Extended Passport (EPP) processing, nicknamed \"OVERPASS\" by the Onapsis Research Labs (ORL), which discovered and responsibly disclosed it[3]. The second, CVE-2026-58240 (CVSS 9.8), nicknamed \"S4GET\", is a missing authentication check in the SAP NetWeaver Message Server[6].\nBoth are remotely exploitable without authentication. According to the reporting researchers, successful exploitation of either can result in arbitrary operating system command execution under the account that owns the SAP installation, leading to full compromise of the affected system and the business data it holds[6].\nCERT-EU strongly recommends applying SAP Security Notes 3747649 and 3759472 as soon as possible.", "creation_timestamp": "2026-09-10T01:00:38.320980Z"}, {"uuid": "afd13ba5-7a27-4a44-a953-b8e7c1c4bef3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mv535dx7ia2k", "content": "CVE-2026-44756: Critical SAP Kernel Flaw Enables Unauthenticated Remote Code Execution\n\n", "creation_timestamp": "2026-09-10T03:08:07.058543Z"}, {"uuid": "df79acc2-8c77-4c5e-9c0d-4cb59867bcab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mv5gsr2q6j27", "content": "Top 3 CVE for last 7 days:\nCVE-2026-85046: 44 interactions\nCVE-2026-85880: 21 interactions\nCVE-2026-44756: 18 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-85880: 20 interactions\nCVE-2026-85046: 17 interactions\nCVE-2026-87491: 16 interactions\n", "creation_timestamp": "2026-09-10T06:36:53.325481Z"}, {"uuid": "a40d30f6-6f27-4764-be08-966fcff589fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44756", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mv6bnph6d52q", "content": "The SAP OVERPASS vulnerability (CVE-2026-44756) scores a perfect CVSS 10.0, letting attackers seize SAP servers before login. Patch Note 3747649 now.\n\n#SAP #OVERPASS #CVE202644756 #CyberSecurity #RCE #Onapsis #InfoSec", "creation_timestamp": "2026-09-10T14:37:14.685463Z"}]}