Langkau ke kandungan
SecondTuesday

Diterjemahkan oleh mesin; mungkin terdapat kesilapan. (Machine-translated; may contain errors.) Baca versi bahasa Inggeris (Read in English)

Hari Tampalan Keselamatan SAP: Februari 2026

Diterbitkan pada 10 Februari 2026 · 26 nota · Sumber: rekod CVE di CVE.org (SAP sebagai CNA)

Dijadualkan pada 10 Februari 2026 (Selasa kedua)

Nota SAP
26
Kritikal
2
Tinggi
6
CVSS tertinggi
9.9
Diketahui dieksploitasi
0

Keutamaan diterbitkan daripada CVSS, bukan keutamaan SAP: CVSS 9.0 atau lebih ialah Kritikal, 7.0 atau lebih Tinggi, 4.0 atau lebih Sederhana, bawah 4.0 Rendah. Keutamaan SAP sendiri hanya terdapat di SAP for Me (log masuk SAP diperlukan).

Ringkasan kami

26 nota dengan CVE SAP. 2 Kritikal dan 6 Tinggi (keutamaan diterbitkan daripada CVSS, bukan keutamaan SAP). CVSS tertinggi 9.9.

Tampalan yang perlu didahulukan

Disusun mengikut: eksploitasi yang diketahui (CISA KEV), kemudian keutamaan (diterbitkan daripada CVSS, bukan keutamaan SAP), kemudian CVSS. Ini alat bantu triaj, bukan pengganti penilaian risiko anda sendiri.

  1. 3697099KritikalCVSS 9.9

    Code Injection vulnerability in SAP CRM and SAP S/4HANA (Scripting Editor)

  2. 3674774KritikalCVSS 9.6

    Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform

  3. 3697567TinggiCVSS 8.8

    XML Signature Wrapping in SAP NetWeaver AS ABAP and ABAP Platform

  4. 3703092TinggiCVSS 7.7

    Denial of service (DOS) in SAP Supply Chain Management

  5. 3705882TinggiCVSS 7.7

    Missing Authorization check in SAP Solution Tools Plug-In (ST-PI)

Perlukan triaj nota bulan ini untuk landskap anda sendiri? Khidmat keselamatan SAP (digitaldisciple.dev)

Semua nota

Keutamaan diterbitkan daripada CVSS, bukan keutamaan SAP: CVSS 9.0 atau lebih ialah Kritikal, 7.0 atau lebih Tinggi, 4.0 atau lebih Sederhana, bawah 4.0 Rendah. Keutamaan SAP sendiri hanya terdapat di SAP for Me (log masuk SAP diperlukan).

Liputan: laman ini disusun daripada rekod CVE SAP, jadi nota tanpa CVE, nota yang hanya mempunyai CVE pihak ketiga (contohnya Apache atau OpenSSL), dan kemas kini kepada nota terdahulu tidak diliputi. Jumlahnya kira-kira 7% daripada nota baharu.

Memaparkan 26 daripada 26

TajukCVE
3697099
Code Injection vulnerability in SAP CRM and SAP S/4HANA (Scripting Editor)
Baharu
SAP CRM and SAP S/4HANAKritikal9.9CVE-2026-0488
3674774
Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform
Baharu
SAP NetWeaver AS ABAP / ABAP PlatformKritikal9.6CVE-2026-0509
3697567
XML Signature Wrapping in SAP NetWeaver AS ABAP and ABAP Platform
Baharu
SAP NetWeaver AS ABAP / ABAP PlatformTinggi8.8CVE-2026-23687
3703092
Denial of service (DOS) in SAP Supply Chain Management
Baharu
SAP Supply Chain ManagementTinggi7.7CVE-2026-23689
3705882
Missing Authorization check in SAP Solution Tools Plug-In (ST-PI)
Baharu
SAP Solution Tools Plug-InTinggi7.7CVE-2026-24322
3654236
Denial of service (DOS) in SAP BusinessObjects BI Platform
Baharu
SAP BusinessObjects BI PlatformTinggi7.5CVE-2026-0490
3678282
Denial of service (DOS) vulnerability in SAP BusinessObjects BI Platform
Baharu
SAP BusinessObjects BI PlatformTinggi7.5CVE-2026-0485
3674246
Open Redirect vulnerability in SAP BusinessObjects Business Intelligence Platform
Baharu
SAP BusinessObjects BI PlatformTinggi7.3CVE-2026-0508
3672622
Missing Authorization check in SAP NetWeaver Application Server ABAP and SAP S/4HANA
Baharu
SAP NetWeaver Application Server ABAP and SAP S/4HANASederhana6.5CVE-2026-0484
3695912
Denial of service (DOS) vulnerability in SAP BusinessObjects Business Intelligence Platform (AdminTools)
Baharu
SAP BusinessObjects BI PlatformSederhana6.5CVE-2026-24324
3678417
Multiple vulnerabilities in BSP Applications of SAP Document Management System
Baharu
SAP Document Management SystemSederhana6.1CVE-2026-0505, CVE-2026-24323
3688319
Open Redirection vulnerability in Business Server Pages Application (TAF_APPLAUNCHER)
Baharu
Business Server Pages ApplicationSederhana6.1CVE-2026-24328
3689543
Race condition vulnerability in SAP Commerce Cloud
Baharu
SAP Commerce CloudSederhana5.9CVE-2026-23684
3679346
Information Disclosure Vulnerability in SAP Business One (B1 Client Memory Dump Files)
Baharu
SAP Business OneSederhana5.8CVE-2026-24319
3687771
Information Disclosure vulnerability in SAP Commerce Cloud
Baharu
SAP Commerce CloudSederhana5.3CVE-2026-24321
3710111
Missing authorization check in SAP Business Workflow
Baharu
SAP Business WorkflowSederhana5.2CVE-2026-24312
3691645
Missing Authorization Check in ABAP based SAP systems
Baharu
ABAP based SAP systemsSederhana5.0CVE-2026-0486
3697256
Cross Site Scripting (XSS) vulnerability in SAP BusinessObjects Enterprise (Central Management Console)
Baharu
SAP BusinessObjects EnterpriseSederhana4.8CVE-2026-24325
3687285
Insecure Deserialization vulnerability in SAP NetWeaver (JMS service)
Baharu
SAP NetWeaverSederhana4.4CVE-2026-23685
3215823
Missing Authorization check in SAP Fiori App (Manage Service Entry Sheets - Lean Services)
Baharu
SAP FioriSederhana4.3CVE-2026-23688
3646297
Information Disclosure vulnerability in S/4HANA (Manage Payment Media)
BaharuDiterbitkan di luar Hari Tampalan
SAP S/4HANASederhana4.3CVE-2026-24314
3678009
Missing authorization check in SAP S/4HANA Defense & Security (Disconnected Operations)
Baharu
SAP S/4HANA Defense & SecuritySederhana4.3CVE-2026-24326
3680390
Missing Authorization Check in SAP Strategic Enterprise Management (Balanced Scorecard in BSP Application)
Baharu
SAP Strategic Enterprise ManagementSederhana4.3CVE-2026-24327
3680416
Missing Authorization check in a function module in SAP Support Tools Plug-In
Baharu
SAP Support Tools Plug-InSederhana4.3CVE-2026-23681
3673213
CRLF Injection vulnerability in SAP NetWeaver Application Server Java
Baharu
SAP NetWeaver AS JavaRendah3.4CVE-2026-23686
3678313
Memory Corruption vulnerability in SAP NetWeaver and ABAP Platform (Application Server ABAP)
Baharu
SAP NetWeaver AS ABAP / ABAP PlatformRendah3.1CVE-2026-24320