Cloud SecurityBleeping Computer
9.9 — CRITICAL
SAP warns of critical flaws in NetWeaver and Commerce Cloud
SAP has addressed 16 vulnerabilities across multiple products as part of its July 2026 security updates, including three critical flaws in NetWeaver, Commerce Cloud, and AppRouter. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
SAP has addressed three critical vulnerabilities in NetWeaver, Commerce Cloud, and AppRouter, which could lead to unauthorized data access, modification, or system unavailability. The vulnerabilities were patched as part of SAP's July 2026 security updates.
⚙️Technical Details
CVEs
CVE-2026-44747CVE-2026-27690CVE-2026-44761
Affected Systems
SAP NetWeaver Application Server ABAPSAP ApprouterSAP Commerce Cloud
Attack Vectors
NETWORK
💥Impact Assessment
Severity: CRITICAL
Who Is at Risk
Organizations using SAP NetWeaver, Commerce Cloud, and AppRouter
🛡️Recommended Actions
1Implement a patch management process to ensure timely application of security updates.
2Monitor system logs for signs of unauthorized access or modification.
3Conduct regular vulnerability assessments to identify potential weaknesses.
📦Affected Products
SAP NetWeaverSAP Commerce CloudSAP Approuter
🔐NVD Verified DataVERIFIED
CVE-2026-44747 ↗CVSS 9.9 — CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:HWeaknesses
CWE-787
CVE-2026-27690 ↗CVSS 9.1 — CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:HWeaknesses
CWE-444
CVE-2026-44761 ↗CVSS 9.1 — CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:NWeaknesses
CWE-1392
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.