importantSYS.SOURCE: The Hacker News• 2026-09-09T11:55:45+05:30

SAP Addresses Critical CVSS 10.0 Vulnerability in Kernel Allowing Unauthenticated RCE

#sap #remote code execution #vulnerability

SAP has addressed a critical CVSS 10.0 vulnerability (CVE-2026-44756) in its kernel, enabling unauthenticated remote code execution through memory corruption in Extended Passport processing. Multiple other high-severity flaws, including CVE-2026-58240 and others, were also patched to mitigate risks of data exposure and system compromise.

SAP has released security updates to address multiple vulnerabilities, including a maximum-severity flaw in SAP Extended Passport (EPP) Processing that could have a severe impact on the confidentiality, integrity, and availability of the application

The vulnerability, tracked as CVE-2026-44756 (CVSS score: 10.0), has been described as a case of memory corruption. Discovered and reported by SAP

Read original article

*** END OF TRANSMISSION ***

> GOOGLE CHROME V8 ZERO-DAY EXPLOITED IN THE WILD FOR SANDBOX CODE EXECUTION > AI RESEARCHER JACOB COXON RESIGNS FROM ANTHROPIC, WARNS OF EXISTENTIAL RISKS > CRITICAL CPANEL VULNERABILITY ALLOWS PRIVILEGE ESCALATION VIA EMAILTRACK MODULE > F5 BIG-IP APM MALWARE EVADES DISK SCANS BY INJECTING PHP WEB SHELL INTO MEMORY > GPT-5.6 SOL'S APPLICATION IN QUANTUM COMPUTING EXPERIMENTS > THE PSYCHOLOGY OF MOTIVATION AND SCIENTIFIC PROGRESS > RESEARCHER DEMONSTRATES BYPASS OF MICROSOFT DEFENDER'S SHIELDBREAK PATCH VIA SHIELDCRASH VULNERABILITY > COPYRIGHT ABOLITION CLAIM AND MASTODON WEB APPLICATION TECHNICAL REQUIREMENTS > SAP ADDRESSES CRITICAL CVSS 10.0 VULNERABILITY IN KERNEL ALLOWING UNAUTHENTICATED RCE > TRADEMARK STATUS OF 'TWEET' AND BIRD LOGO IN X V. PROJECT BLUEBIRD CASE> GOOGLE CHROME V8 ZERO-DAY EXPLOITED IN THE WILD FOR SANDBOX CODE EXECUTION > AI RESEARCHER JACOB COXON RESIGNS FROM ANTHROPIC, WARNS OF EXISTENTIAL RISKS > CRITICAL CPANEL VULNERABILITY ALLOWS PRIVILEGE ESCALATION VIA EMAILTRACK MODULE > F5 BIG-IP APM MALWARE EVADES DISK SCANS BY INJECTING PHP WEB SHELL INTO MEMORY > GPT-5.6 SOL'S APPLICATION IN QUANTUM COMPUTING EXPERIMENTS > THE PSYCHOLOGY OF MOTIVATION AND SCIENTIFIC PROGRESS > RESEARCHER DEMONSTRATES BYPASS OF MICROSOFT DEFENDER'S SHIELDBREAK PATCH VIA SHIELDCRASH VULNERABILITY > COPYRIGHT ABOLITION CLAIM AND MASTODON WEB APPLICATION TECHNICAL REQUIREMENTS > SAP ADDRESSES CRITICAL CVSS 10.0 VULNERABILITY IN KERNEL ALLOWING UNAUTHENTICATED RCE > TRADEMARK STATUS OF 'TWEET' AND BIRD LOGO IN X V. PROJECT BLUEBIRD CASE