The Hacker News / Bleeping Computer · 11/10/2026

SAP Patches Four CVSS 10.0 Flaws, Including Two Enabling Remote Code Execution

SAP patched four maximum-severity RCE vulnerabilities in NetWeaver, Web Dispatcher, and Gateway; exploitable without authentication.

Read original coverage