{"vulnerability": "cve-2026-4474", "sightings": [{"uuid": "04592e09-6286-4674-bff4-bdb6591b40f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44742", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlc5eyncrc2r", "content": "CVE-2026-44742 - Postorius HTML Injection\nCVE ID : CVE-2026-44742\n \n Published : May 7, 2026, 7:16 p.m. | 1\u00a0hour, 9\u00a0minutes ago\n \n Description : Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as exploited in ...", "creation_timestamp": "2026-05-07T21:19:29.524853Z"}, {"uuid": "53ba40c7-d6b4-46b5-ae48-1053e732b788", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44749", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmrpdj6rih2v", "content": "CVE-2026-44749 - Information Disclosure vulnerability in SAP Gateway\nCVE ID : CVE-2026-44749\n \n Published : 26 mai 2026 17:24 | 37\u00a0minutes ago\n \n Description : The SAP Gateway allows attackers to inject content into error messages, potentially leading to disclosure of request ...", "creation_timestamp": "2026-05-26T19:15:54.947138Z"}, {"uuid": "ff727bb9-8051-462d-8118-1a3659954bfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-44748", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116717559819877272", "content": "\ud83d\udea8 CRITICAL: CVE-2026-44748 hits SAP NetWeaver AS ABAP & ABAP Platform (SAP_BASIS 702 \u2013 919). Improper cryptographic signature checks may let attackers gain unauthorized access! Patch urgently. https://radar.offseq.com/threat/cve-2026-44748-cwe-347-improper-verification-of-cr-3c43c9f0 #OffSeq #SAP #Vuln #InfoSec", "creation_timestamp": "2026-06-09T01:30:28.035502Z"}, {"uuid": "878d41c7-154d-49dc-a03a-9d4778861474", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mntaren2hl25", "content": "CVE-2026-44748 - XML Signature Wrapping in SAML Authentication in SAP NetWeaver AS ABAP and ABAP Platform\nCVE ID : CVE-2026-44748\n \n Published : June 9, 2026, 1:16 a.m. | 1\u00a0hour, 58\u00a0minutes ago\n \n Description : SAP NetWeaver Application Server ABAP and ABAP Platform allows an ...", "creation_timestamp": "2026-06-09T03:25:44.977506Z"}, {"uuid": "2d748815-03b1-48a6-b151-2f412a14ad65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://www.acn.gov.it/portale/w/sap-security-patch-day-17", "content": "", "creation_timestamp": "2026-06-09T01:20:31.000000Z"}, {"uuid": "cfc87833-4c8a-4fb5-868a-a2218abb2623", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44743", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnu76qz3un2z", "content": "\ud83d\udd17 CVE : CVE-2025-68161, CVE-2026-22732, CVE-2026-24315, CVE-2026-27671, CVE-2026-29145, CVE-2026-40128, CVE-2026-44743, CVE-2026-44744, CVE-2026-44746, CVE-2026-44748, CVE-2026-44750, CVE-2026-44751, CVE-2026-44754, CVE-2026-44755, CVE-2026-44757", "creation_timestamp": "2026-06-09T12:30:09.411238Z"}, {"uuid": "cd270bb1-35d9-4246-b996-c94d813d268b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44744", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnu76qz3un2z", "content": "\ud83d\udd17 CVE : CVE-2025-68161, CVE-2026-22732, CVE-2026-24315, CVE-2026-27671, CVE-2026-29145, CVE-2026-40128, CVE-2026-44743, CVE-2026-44744, CVE-2026-44746, CVE-2026-44748, CVE-2026-44750, CVE-2026-44751, CVE-2026-44754, CVE-2026-44755, CVE-2026-44757", "creation_timestamp": "2026-06-09T12:30:09.570069Z"}, {"uuid": "6102ed64-f2f8-4d77-98ba-cf37bd1f628c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44746", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnu76qz3un2z", "content": "\ud83d\udd17 CVE : CVE-2025-68161, CVE-2026-22732, CVE-2026-24315, CVE-2026-27671, CVE-2026-29145, CVE-2026-40128, CVE-2026-44743, CVE-2026-44744, CVE-2026-44746, CVE-2026-44748, CVE-2026-44750, CVE-2026-44751, CVE-2026-44754, CVE-2026-44755, CVE-2026-44757", "creation_timestamp": "2026-06-09T12:30:09.862931Z"}, {"uuid": "ac511560-4915-4ebb-80c1-439259599346", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnu76qz3un2z", "content": "\ud83d\udd17 CVE : CVE-2025-68161, CVE-2026-22732, CVE-2026-24315, CVE-2026-27671, CVE-2026-29145, CVE-2026-40128, CVE-2026-44743, CVE-2026-44744, CVE-2026-44746, CVE-2026-44748, CVE-2026-44750, CVE-2026-44751, CVE-2026-44754, CVE-2026-44755, CVE-2026-44757", "creation_timestamp": "2026-06-09T12:30:10.021016Z"}, {"uuid": "757681cb-2677-4f16-964c-76ec09f5b6ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnuh5n6vh32y", "content": "3/ \u26a0\ufe0f SAP Patch Tuesday: CVE-2026-44748 (CVSS 9.9) \u2014 XML tampering lets attackers hijack enterprise identity across SAP systems. CVE-2026-27671 (CVSS 9.8) \u2014 unauthenticated memory corruption. Patch both NOW.", "creation_timestamp": "2026-06-09T14:52:55.234944Z"}, {"uuid": "1f175da8-4f78-41e4-a55a-bec05d5d2023", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnuh5n6lol2y", "content": "3/ \u26a0\ufe0f SAP Patch Tuesday: CVE-2026-44748 (CVSS 9.9) \u2014 XML tampering lets attackers hijack enterprise identity across SAP systems. CVE-2026-27671 (CVSS 9.8) \u2014 unauthenticated memory corruption. Patch both NOW.", "creation_timestamp": "2026-06-09T14:52:38.841781Z"}, {"uuid": "8a56dea8-e231-4bad-bb67-70b66ef0e1ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnuh5n6sjd2y", "content": "3/ \u26a0\ufe0f SAP Patch Tuesday: CVE-2026-44748 (CVSS 9.9) \u2014 XML tampering lets attackers hijack enterprise identity across SAP systems. CVE-2026-27671 (CVSS 9.8) \u2014 unauthenticated memory corruption. Patch both NOW.", "creation_timestamp": "2026-06-09T14:52:40.146256Z"}, {"uuid": "5aebd20b-ef09-4a9d-bb78-5cab2cb79ff4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnuh5n6til2y", "content": "3/ \u26a0\ufe0f SAP Patch Tuesday: CVE-2026-44748 (CVSS 9.9) \u2014 XML tampering lets attackers hijack enterprise identity across SAP systems. CVE-2026-27671 (CVSS 9.8) \u2014 unauthenticated memory corruption. Patch both NOW.", "creation_timestamp": "2026-06-09T14:52:41.482608Z"}, {"uuid": "cafea526-4ca4-4934-9c6e-5bdba5a2bda7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnuh5n6uht2y", "content": "3/ \u26a0\ufe0f SAP Patch Tuesday: CVE-2026-44748 (CVSS 9.9) \u2014 XML tampering lets attackers hijack enterprise identity across SAP systems. CVE-2026-27671 (CVSS 9.8) \u2014 unauthenticated memory corruption. Patch both NOW.", "creation_timestamp": "2026-06-09T14:52:51.824264Z"}, {"uuid": "360e4f17-0b8c-44dc-ac7e-34c62e6253ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnuh5n6wgd2y", "content": "3/ \u26a0\ufe0f SAP Patch Tuesday: CVE-2026-44748 (CVSS 9.9) \u2014 XML tampering lets attackers hijack enterprise identity across SAP systems. CVE-2026-27671 (CVSS 9.8) \u2014 unauthenticated memory corruption. Patch both NOW.", "creation_timestamp": "2026-06-09T14:52:57.052037Z"}, {"uuid": "8e6a078f-0fcd-41e7-b826-9ee2ccfa6b70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnuh5n6xfl2y", "content": "3/ \u26a0\ufe0f SAP Patch Tuesday: CVE-2026-44748 (CVSS 9.9) \u2014 XML tampering lets attackers hijack enterprise identity across SAP systems. CVE-2026-27671 (CVSS 9.8) \u2014 unauthenticated memory corruption. Patch both NOW.", "creation_timestamp": "2026-06-09T14:52:58.410789Z"}, {"uuid": "edaa0fb1-d023-4518-8141-f42ddd2c6169", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnuh5n6xfm2y", "content": "3/ \u26a0\ufe0f SAP Patch Tuesday: CVE-2026-44748 (CVSS 9.9) \u2014 XML tampering lets attackers hijack enterprise identity across SAP systems. CVE-2026-27671 (CVSS 9.8) \u2014 unauthenticated memory corruption. Patch both NOW.", "creation_timestamp": "2026-06-09T14:52:59.941845Z"}, {"uuid": "57e25469-b000-4ef2-baec-f2f246c101cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnuh5n6yeu2y", "content": "3/ \u26a0\ufe0f SAP Patch Tuesday: CVE-2026-44748 (CVSS 9.9) \u2014 XML tampering lets attackers hijack enterprise identity across SAP systems. CVE-2026-27671 (CVSS 9.8) \u2014 unauthenticated memory corruption. Patch both NOW.", "creation_timestamp": "2026-06-09T14:53:01.229709Z"}, {"uuid": "1900c68e-a896-49ea-a8b6-4ec47ffc4a59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mnuhl5u5352d", "content": "SAP released 15 June 2026 security notes, including 4 critical fixes for NetWeaver, Commerce Cloud, and Data Hub. CVE-2026-44748 in NetWeaver AS ABAP scores 9.9 and impacts XML Signature Wrapping. #SAP #NetWeaver #CommerceCloud", "creation_timestamp": "2026-06-09T15:00:12.345726Z"}, {"uuid": "37fd7344-b067-4c76-86e9-b41a20f810f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mnv67dcpyh2j", "content": "SAP's June 2026 patch fixes 15 flaws, including 4 critical issues in NetWeaver and Commerce Cloud. CVE-2026-44748 and CVE-2026-27671 may enable auth bypass, memory corruption, and directory traversal. #SAP #NetWeaver #CommerceCloud", "creation_timestamp": "2026-06-09T21:45:12.155189Z"}, {"uuid": "9c679a9e-3242-44b9-8131-d78a0a381df6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://www.cert.se/2026/06/patchtisdag-juni-2026-samlad-information-om-manadens-sakerhetsuppdateringar.html", "content": "", "creation_timestamp": "2026-06-10T05:00:00.000000Z"}, {"uuid": "78661643-8fc2-4b42-9bf3-930fbc09acad", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44742", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e6ba9994-41dc-45f7-b8e9-ac330a61d59b", "content": "", "creation_timestamp": "2026-06-19T12:45:12.328196Z"}, {"uuid": "ba4fe40b-0d52-4246-9ade-d745d1207b82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motnj6kkp32f", "content": "\ud83d\udea8  ALERT: CVE-2026-44748\n\nCVSS 9.9/10\n\n\ud83d\udccb WHAT IT IS:\nSAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated attacker with normal privileges to obtain a valid signed message and send modified signed XML documents to the verifier. This may result in acceptance of tampered iden", "creation_timestamp": "2026-06-22T00:39:00.224804Z"}, {"uuid": "aff1ec70-3788-454f-95d6-dd9da060af20", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44742", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c4015df2-c2aa-475a-9fd4-f457982e3f51", "content": "", "creation_timestamp": "2026-06-23T14:03:38.367244Z"}, {"uuid": "5c394e04-ea08-439e-98ba-3927875f5b86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mpu7rw5fsk2l", "content": "SAP\u304cNetWeaver\u304a\u3088\u3073Commerce\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u30d1\u30c3\u30c1\u3092\u9069\u7528\n\n\u89e3\u6c7a\u3055\u308c\u305f\u30d0\u30b0\u306e\u4e2d\u3067\u6700\u3082\u6df1\u523b\u306a\u306e\u306f\u3001CVE-2026-44748\uff08CVSS\u30b9\u30b3\u30a29.9\uff09\u3067\u3001NetWeaver AS ABAP\u304a\u3088\u3073ABAP\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u306eSAML\u8a8d\u8a3c\u306b\u304a\u3051\u308bXML\u7f72\u540d\u30e9\u30c3\u30d4\u30f3\u30b0\u306e\u554f\u984c\u3068\u3057\u3066\u8aac\u660e\u3055\u308c\u3066\u3044\u307e\u3059\u3002\n\n\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4f01\u696d\u306eOnapsis\u306f\u3001\u300c\u901a\u5e38\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u653b\u6483\u8005\u306f\u3001\u6709\u52b9\u306a\u7f72\u540d\u4ed8\u304d\u30e1\u30c3\u30bb\u30fc\u30b8\u3092\u53d6\u5f97\u3057\u3001\u6539\u3056\u3093\u3055\u308c\u305fID\u60c5\u5831\u3092\u542b\u3080\u5909\u66f4\u3055\u308c\u305f\u7f72\u540d\u4ed8\u304dXML\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u3092\u691c\u8a3c\u8005\u306b\u9001\u4fe1\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u300d\u3068\u8aac\u660e\u3057\u3066\u3044\u307e\u3059\u3002", "creation_timestamp": "2026-07-04T23:31:14.786792Z"}, {"uuid": "65a6f5f6-9929-43d3-9cc1-f90cfd4cd633", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mpuegonctc2l", "content": "SAP\u3001\u6708\u4f8b\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b - \u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u300d\u304c4\u4ef6\n\nSAP\u306f\u73fe\u5730\u6642\u95932026\u5e746\u67089\u65e5\u3001\u3042\u3089\u305f\u306b15\u4ef6\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u305f\u3002\u6df1\u523b\u306a\u8106\u5f31\u6027\u3082\u542b\u307e\u308c\u308b\u3002\n\n...\n\n\u300cCVE-2026-44748\u300d\u306f\u3001\u300cSAP NetWeaver AS ABAP\u300d\u300c\u540cABAP Platform\u300d\u306b\u304a\u3044\u3066\u3001SAML\u8a8d\u8a3c\u306b\u304a\u3051\u308bXML\u7f72\u540d\u30e9\u30c3\u30d4\u30f3\u30b0\u306e\u8106\u5f31\u6027\u3002\u307e\u305f\u4e21\u88fd\u54c1\u306e\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30b5\u30fc\u30d0\u306b\u304a\u3044\u3066\u3001\u30e1\u30e2\u30ea\u7834\u58ca\u306e\u8106\u5f31\u6027\u300cCVE-2026-27671\u300d\u304c\u5224\u660e\u3057\u3066\u3044\u308b\u3002", "creation_timestamp": "2026-07-05T00:54:24.202850Z"}, {"uuid": "47d4856e-68db-44d6-ad5b-0a1a863c0e12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44747", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqkymgc6gn2r", "content": "CVE-2026-44747 - sap netweaver application server abap\nSAP NetWeaver ABAP systems are at risk of memory corruption, which could lead to unauthorized data access or system unavailability. This is a serious issue that\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sapse #CVE #infosec", "creation_timestamp": "2026-07-14T00:54:07.947137Z"}, {"uuid": "5797b5af-e5d7-447b-8221-0e5c71b476d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44745", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mql3576md52x", "content": "CVE-2026-44745 - Open Redirect vulnerability in SAP Approuter\nCVE ID : CVE-2026-44745\n \n Published : July 14, 2026, 1:16 a.m. | 14\u00a0minutes ago\n \n Description : SAP Approuter does not properly validate incoming request headers during the OAuth2 login flow under certain configur...", "creation_timestamp": "2026-07-14T01:39:16.218042Z"}, {"uuid": "df1e3ddc-9189-4671-b2ec-02b6745b46df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44747", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mql5t5mr6v2x", "content": "CVE-2026-44747 - Memory Corruption vulnerability in SAP NetWeaver Application Server ABAP\nCVE ID : CVE-2026-44747\n \n Published : July 14, 2026, 1:16 a.m. | 14\u00a0minutes ago\n \n Description : SAP NetWeaver Application Server ABAP allows an authenticated attacker to leverage logica...", "creation_timestamp": "2026-07-14T02:27:20.567297Z"}, {"uuid": "c81b5376-ccbb-42ae-ac61-1b91821d9225", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-44747", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116916094801792082", "content": "CVE-2026-44747: CRITICAL out-of-bounds write in SAP NetWeaver AS ABAP (CVSS 9.9). Authenticated attackers can cause memory corruption \u2014 risking data & system availability. No patch. Restrict access, monitor activity. https://radar.offseq.com/threat/cve-2026-44747-cwe-787-out-of-bounds-write-in-saps-416e906d69e7435c #OffSeq #SAP #Vulnerability #InfoSec", "creation_timestamp": "2026-07-14T03:00:30.467335Z"}, {"uuid": "594e3ac5-0871-43e4-80e3-2212cca8faef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-44747", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mql7ohpngd2f", "content": "CRITICAL out-of-bounds write (CVE-2026-44747) in SAP NetWeaver AS ABAP (CVSS 9.9) allows authenticated attackers to corrupt memory. No patch \u2014 restrict access & monitor for anomalies. https://radar.offseq.com/threat/cve-2026-44747-cwe-787-out-of-bounds-write-in-saps-416e906d69e7435c #OffSeq #SAP ...", "creation_timestamp": "2026-07-14T03:00:31.679378Z"}, {"uuid": "51365bcf-a417-46a8-8543-a6cf679fedce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44747", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116916519350052742", "content": "The severity is increased for this new vulnerability affecting SAP NetWeaver Application Server ABAP (CVE-2026-44747) https://vuldb.com/vuln/378234", "creation_timestamp": "2026-07-14T04:48:44.248036Z"}, {"uuid": "dbb134c8-7303-4b3c-8e01-d63c29c45bd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44745", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqljqqjfzm2i", "content": "\ud83d\udfe0 CVE-2026-44745 - High (8.1)\n\nSAP Approuter does not properly validate incoming request headers during the OAuth2 login flow un...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44745/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-14T06:00:44.832852Z"}, {"uuid": "7f77bda1-7c2b-4d69-b48f-b67e2158468c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44747", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqljqx2o2r2j", "content": "\ud83d\udd34 CVE-2026-44747 - Critical (9.9)\n\nSAP NetWeaver Application Server ABAP allows an authenticated attacker to leverage logical errors...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44747/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-14T06:00:51.940989Z"}, {"uuid": "8dfa9055-1e77-4a4a-9ac1-8a8f18eaa23e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44747", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mqlozfdpwc27", "content": "SAP Security Patch Day July 2026 fixes CVE-2026-44747 (CVSS 9.9), a memory corruption flaw in NetWeaver AS ABAP, plus two more critical bugs.\n\n#SAP #CVE202644747 #MemoryCorruption #NetWeaver #CyberSecurity", "creation_timestamp": "2026-07-14T07:35:04.497531Z"}, {"uuid": "8397db0a-9f7a-4403-9bb6-d7614f839f74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44747", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mqm3xlcmdx2c", "content": "SAP\u304c\u300cNetWeaver\u300d\u300cApprouter\u300d\u300cCommerce Cloud\u300d\u306e\u6df1\u523b\u306a\u8106\u5f31\u6027\u3092\u4fee\u6b63\n\n\u30a8\u30f3\u30bf\u30fc\u30d7\u30e9\u30a4\u30ba\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u5927\u624b\u306eSAP\u306f\u706b\u66dc\u65e5\u30012026\u5e747\u6708\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30d1\u30c3\u30c1\u30c7\u30fc\u306e\u4e00\u74b0\u3068\u3057\u3066\u300119\u4ef6\u306e\u65b0\u898f\u30fb\u66f4\u65b0\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30ce\u30fc\u30c8\u3092\u516c\u958b\u3057\u307e\u3057\u305f\u3002 \u4fee\u6b63\u3055\u308c\u305f\u8106\u5f31\u6027\u306e\u4e2d\u3067\u6700\u3082\u6df1\u523b\u306a\u306e\u306f\u3001CVE-2026-44747(CVSS\u30b9\u30b3\u30a29.9)\u3067\u3001NetWeaver Application Server ABAP\u306b...", "creation_timestamp": "2026-07-14T11:26:41.518144Z"}, {"uuid": "087389d9-a1cc-4e05-846f-bd71202f66ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44747", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116918218287332576", "content": "SAP July 2026 patch day delivers CRITICAL fixes: NetWeaver (CVE-2026-44747, memory corruption), Approuter (CVE-2026-27690, HTTP smuggling), Commerce Cloud (CVE-2026-44761, hardcoded creds). Patch ASAP. https://radar.offseq.com/threat/sap-patches-critical-vulnerabilities-in-netweaver--aa75f703df9065e4 #OffSeq #SAP #Vuln #PatchTuesday", "creation_timestamp": "2026-07-14T12:00:31.348629Z"}, {"uuid": "271136da-9457-4391-ac7e-bb1f509d9d43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44747", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqm6itjgdl26", "content": "CVE-2026-44747: SAP's Critical NetWeaver Flaws Spotlight Security Gaps #CVE202644747 #SAPSecurity #NetWeaver", "creation_timestamp": "2026-07-14T12:12:08.323361Z"}, {"uuid": "8a51bd93-0265-448e-9a47-6144044e3172", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44747", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqm6imj66o2p", "content": "CVE-2026-44747: SAP's Patch Can't Mask Risks of Neglected Security #CyberSecurity #SAP #CVE2026", "creation_timestamp": "2026-07-14T12:12:00.818531Z"}, {"uuid": "dc2d568d-7e3b-41b7-82f7-6e96f9405518", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44747", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqm6iqc6uu2g", "content": "CVE-2026-44747: SAP's Critical Patch Highlights Vulnerability Lapses #CVE202644747 #SAP #Vulnerabilities", "creation_timestamp": "2026-07-14T12:12:04.611357Z"}, {"uuid": "3968f849-4907-4702-93df-9896e96918d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44747", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqm6ix25iz22", "content": "CVE-2026-44747: SAP's Patching Process Doesn't Address Configuration Risks #CVE202644747 #SAP #Cybersecurity", "creation_timestamp": "2026-07-14T12:12:11.722776Z"}, {"uuid": "0ecb989c-0992-4de8-ab7e-f58909798337", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44747", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqm6ndntmp2p", "content": "CVE-2026-44747: SAP's Latest Patches Leave More Questions Than Answers #CVE202644747 #SAP #CyberSecurity", "creation_timestamp": "2026-07-14T12:14:39.885009Z"}, {"uuid": "e391d90a-fa4a-4716-8b76-0643731ad0ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44747", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqm6ngqu3s2o", "content": "CVE-2026-44747: Are SAP's Patches a Stopgap or a Systemic Failure? #SAP #Cybersecurity #Vulnerability", "creation_timestamp": "2026-07-14T12:14:42.411724Z"}, {"uuid": "3b8f0d86-37a1-4329-8227-6cdfdd2bf1c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44747", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mqmzmuyecx2f", "content": "\ud83e\udd16 CVE-2026-44747 (CVSS 9.9): Critical out-of-bounds write in SAP NetWeaver Application Server ABAP. Memory corruption could expose or modify data. Authenticated attack vector but high severity for SAP\u2026", "creation_timestamp": "2026-07-14T20:17:34.447534Z"}, {"uuid": "2b0f940e-8336-4b10-b038-9f4bd5ae6e0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44747", "type": "seen", "source": "https://thehackernews.com/2026/07/sap-patches-cvss-99-netweaver-abap-flaw.html", "content": "SAP has rolled out updates to address multiple vulnerabilities as part of its July 2026 security updates, including a critical flaw in SAP NetWeaver Application Server ABAP.\n\nThe vulnerability in question is CVE-2026-44747 (CVSS score: 9.9), an out-of-bounds write flaw that allows an authenticated attacker to leverage logical errors in memory management to cause a memory corruption that could", "creation_timestamp": "2026-07-14T22:05:06.313232Z"}, {"uuid": "015c724b-6bed-4062-a34b-d8a767ced9ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44747", "type": "seen", "source": "https://thehackernews.com/2026/07/sap-patches-cvss-99-netweaver-abap-flaw.html", "content": "SAP has rolled out updates to address multiple vulnerabilities as part of its July 2026 security updates, including a critical flaw in SAP NetWeaver Application Server ABAP.\n\nThe vulnerability in question is CVE-2026-44747 (CVSS score: 9.9), an out-of-bounds write flaw that allows an authenticated attacker to leverage logical errors in memory management to cause a memory corruption that could", "creation_timestamp": "2026-07-15T01:04:31.955293Z"}, {"uuid": "483e95c0-678f-48f2-bd22-0ebe4f76001f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44747", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mqnvcdm2qd2u", "content": "Top 3 CVE for last 7 days:\nCVE-2026-43499: 26 interactions\nCVE-2026-20262: 14 interactions\nCVE-2026-44747: 14 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-44747: 14 interactions\nCVE-2026-47295: 6 interactions\nCVE-2026-54527: 6 interactions\n", "creation_timestamp": "2026-07-15T04:32:45.564411Z"}, {"uuid": "ec63696f-31a4-4138-9011-d77d6134c0a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44747", "type": "seen", "source": "https://bsky.app/profile/eu-de.bsky.social/post/3mqo77tdf6g2n", "content": "Critical Vulnerabilities in SAP NetWeaver, SAP Approuter and SAP Commerce Cloud\n\nhttps://www.europesays.com/germany/54957/\n\nBackground SAP has released security updates to address multiple vulnerabilities (CVE-2026-44747, CVE-2026-27690, and CVE-2026-44761) affecting SAP NetWeaver Application\u2026", "creation_timestamp": "2026-07-15T07:30:18.803742Z"}, {"uuid": "2c3f4835-a0a4-43cf-9fe0-e51e07550cf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44747", "type": "seen", "source": "https://bsky.app/profile/modat-io.bsky.social/post/3mqopzbpevc2j", "content": "CVE-2026-44747 (CVSS 9.9): out-of-bounds write in SAP NetWeaver AS ABAP allows an authenticated attacker to trigger memory corruption, risking data access, modification, or DoS. Patched in SAP's July 2026 Security Patch Day. Install the fixed ABAP Kernel now. Query: product=\"SAP NetWeaver\"", "creation_timestamp": "2026-07-15T12:30:57.995256Z"}, {"uuid": "1e2ce46d-767c-4933-8acc-37e89db2f1fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44747", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mqpyj7dt2c2h", "content": "SAP\u30012026\u5e747\u6708\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30d1\u30c3\u30c1\u30c7\u30fc\u3067CVSS 9.9\u306eNetWeaver\u91cd\u5927\u8106\u5f31\u6027\u3092\u542b\u308016\u4ef6\u3092\u4fee\u6b63(CVE-2026-44747, CVE-2026-27690)\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews", "creation_timestamp": "2026-07-16T00:35:41.334576Z"}, {"uuid": "6191f61d-ed77-4791-946b-59a6c6e80fdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44747", "type": "seen", "source": "https://bsky.app/profile/eu-de.bsky.social/post/3mqqjss6emp2g", "content": "Critical Vulnerabilities in SAP NetWeaver, SAP Approuter and SAP Commerce Cloud\n\nhttps://www.europesays.com/germany/55654/\n\nBackground SAP has released security updates to address multiple vulnerabilities (CVE-2026-44747, CVE-2026-27690, and CVE-2026-44761) affecting SAP NetWeaver Application\u2026", "creation_timestamp": "2026-07-16T05:45:11.975712Z"}, {"uuid": "17c062a5-0e1b-4d8e-bbda-ae233905ee54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44747", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mqswxbzsby2v", "content": "Top 3 CVE for last 7 days:\nCVE-2026-15409: 18 interactions\nCVE-2026-44747: 14 interactions\nCVE-2026-20262: 13 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-46817: 5 interactions\nCVE-2026-20253: 4 interactions\nCVE-2026-42533: 4 interactions\n", "creation_timestamp": "2026-07-17T04:45:41.038270Z"}, {"uuid": "f409e035-36e1-4c8c-bbb5-574457976150", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44747", "type": "seen", "source": "https://bsky.app/profile/lasenal.bsky.social/post/3mquezwyipr2y", "content": "SAP parcha una falla cr\u00edtica de puntaje 9,9 en NetWeaver.\n\nEn su d\u00eda de parches de julio, SAP corrigi\u00f3 CVE-2026-44747, una corrupci\u00f3n de memoria en NetWeaver AS ABAP con puntaje 9,9 sobre 10. SAP recomienda aplicar el parche.\n\nLeer en SAP \u2192\n\n#LaSe\u00f1alNews #Ciberseguridad #CyberSecurity", "creation_timestamp": "2026-07-17T18:30:22.372350Z"}, {"uuid": "fc41c16c-890f-4296-8df2-83bc227ccdca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44747", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mqvgluimld24", "content": "Top 3 CVE for last 7 days:\nCVE-2026-58532: 47 interactions\nCVE-2026-15409: 19 interactions\nCVE-2026-44747: 14 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-58532: 47 interactions\nCVE-2026-14266: 5 interactions\nCVE-2026-56171: 5 interactions\n", "creation_timestamp": "2026-07-18T04:30:57.089718Z"}, {"uuid": "424770f6-4c23-46be-92c9-d2f560f259f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44747", "type": "seen", "source": "Telegram/JCnwpg8q-FUNDPTmp-hJHm5yPpzBuWY3fD9XBQ3AIVijmw", "content": "", "creation_timestamp": "2026-07-18T13:00:04.041133Z"}, {"uuid": "dafcafd8-0d2d-4407-8d7b-0092444d5abd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44747", "type": "seen", "source": "Telegram/JCnwpg8q-FUNDPTmp-hJHm5yPpzBuWY3fD9XBQ3AIVijmw", "content": "", "creation_timestamp": "2026-07-19T00:00:27.952647Z"}, {"uuid": "97063548-6a06-4f41-9028-af1c29601587", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://www.acn.gov.it/portale/w/operational-summary-giugno-2026", "content": "", "creation_timestamp": "2026-07-24T12:45:51.125958Z"}]}