Diterjemahkan oleh mesin; mungkin terdapat kesilapan. (Machine-translated; may contain errors.) Baca versi bahasa Inggeris (Read in English)
Hari Tampalan Keselamatan SAP: Ogos 2026
Diterbitkan pada 11 Ogos 2026 · 24 nota · Sumber: rekod CVE di CVE.org (SAP sebagai CNA)
Dijadualkan pada 11 Ogos 2026 (Selasa kedua)
- Nota SAP
- 23
- Nasihat GitHub
- 1
- Kritikal
- 3
- Tinggi
- 6
- CVSS tertinggi
- 10.0
- Diketahui dieksploitasi
- 0
Keutamaan diterbitkan daripada CVSS, bukan keutamaan SAP: CVSS 9.0 atau lebih ialah Kritikal, 7.0 atau lebih Tinggi, 4.0 atau lebih Sederhana, bawah 4.0 Rendah. Keutamaan SAP sendiri hanya terdapat di SAP for Me (log masuk SAP diperlukan).
Ringkasan kami
24 nota dengan CVE SAP. 3 Kritikal dan 6 Tinggi (keutamaan diterbitkan daripada CVSS, bukan keutamaan SAP). CVSS tertinggi 10.0.
Tampalan yang perlu didahulukan
Disusun mengikut: eksploitasi yang diketahui (CISA KEV), kemudian keutamaan (diterbitkan daripada CVSS, bukan keutamaan SAP), kemudian CVSS. Ini alat bantu triaj, bukan pengganti penilaian risiko anda sendiri.
Improper Authorization in SAP Commerce Cloud (Data Hub Adapter)
Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform
Code Injection vulnerability in Manufacturing Integration and Intelligence
Privilege Escalation vulnerability in SAP ABAP Developer Tools
Credentials disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Server)
Perlukan triaj nota bulan ini untuk landskap anda sendiri? Khidmat keselamatan SAP (digitaldisciple.dev)
Semua nota
Keutamaan diterbitkan daripada CVSS, bukan keutamaan SAP: CVSS 9.0 atau lebih ialah Kritikal, 7.0 atau lebih Tinggi, 4.0 atau lebih Sederhana, bawah 4.0 Rendah. Keutamaan SAP sendiri hanya terdapat di SAP for Me (log masuk SAP diperlukan).
Liputan: laman ini disusun daripada rekod CVE SAP, jadi nota tanpa CVE, nota yang hanya mempunyai CVE pihak ketiga (contohnya Apache atau OpenSSL), dan kemas kini kepada nota terdahulu tidak diliputi. Jumlahnya kira-kira 7% daripada nota baharu.
Memaparkan 24 daripada 24
| Tajuk | CVE | ||||
|---|---|---|---|---|---|
| 3771065 | Improper Authorization in SAP Commerce Cloud (Data Hub Adapter) Baharu | SAP Commerce Cloud | Kritikal | 10.0 | CVE-2026-58231, CVE-2026-66766 |
| 3714806 | Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform Baharu | SAP NetWeaver AS ABAP / ABAP Platform | Kritikal | 9.8 | CVE-2026-34265 |
| 3758900 | Code Injection vulnerability in Manufacturing Integration and Intelligence Baharu | SAP Manufacturing Integration and Intelligence | Kritikal | 9.1 | CVE-2026-44758 |
| 3772411 | Privilege Escalation vulnerability in SAP ABAP Developer Tools Baharu | SAP ABAP Developer Tools | Tinggi | 8.8 | CVE-2026-58243 |
| 3756565 | Credentials disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Server) Baharu | SAP BusinessObjects BI Platform | Tinggi | 7.9 | CVE-2026-66763 |
| 3759854 | Directory Traversal vulnerability in SAP Manufacturing Integration and Intelligence Baharu | SAP Manufacturing Integration and Intelligence | Tinggi | 7.6 | CVE-2026-44763 |
| 3758657 | Missing Authorization Check in SAP Manufacturing Integration and Intelligence Baharu | SAP Manufacturing Integration and Intelligence | Tinggi | 7.3 | CVE-2026-44765 |
| 3758910 | Missing Authorization Check in SAP Manufacturing Integration and Intelligence Baharu | SAP Manufacturing Integration and Intelligence | Tinggi | 7.3 | CVE-2026-44764 |
| 3786038 | Multiple vulnerabilities in SAP Business AI Platform (Approuter) Baharu | SAP Business AI Platform | Tinggi | 7.0 | CVE-2026-58230, CVE-2026-58237, CVE-2026-58238, CVE-2026-58239, CVE-2026-66760, CVE-2026-66761, CVE-2026-66774, CVE-2026-66775, CVE-2026-66776, CVE-2026-66777, CVE-2026-66778 |
| 3753141 | XML External Entity Injection in SAP BusinessObjects Business Intelligence Baharu | SAP BusinessObjects BI Platform | Sederhana | 6.5 | CVE-2026-58248 |
| 3721424 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP Baharu | SAP NetWeaver AS ABAP / ABAP Platform | Sederhana | 6.3 | CVE-2026-66779 |
| 3758318 | Use of Vulnerable Third-Party Component in SAP NetWeaver AS Java (Adobe Document Services) Baharu | SAP NetWeaver AS Java | Sederhana | 6.3 | CVE-2026-58235 |
| 3766473 | SQL Injection vulnerability in SAP Social Intelligence Baharu | SAP Social Intelligence | Sederhana | 6.3 | CVE-2026-66770 |
| 3772071 | Cross Site Scripting (XSS) vulnerability in SAPUI5 Baharu | SAPUI5 | Sederhana | 6.1 | CVE-2026-66771 |
| GHSA-hc5j-q32w-c25v | Server-controlled `__next` URL is not checking cross-origin Baharu | Odata | Sederhana | 5.9 | CVE-2026-66773 |
| 3745182 | OS Command Injection vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform Baharu | SAP NetWeaver AS ABAP / ABAP Platform | Sederhana | 5.5 | CVE-2026-58236 |
| 3725940 | Memory Corruption vulnerability in SAPSPrint Service Baharu | SAPSPrint Service | Sederhana | 5.3 | CVE-2026-40130 |
| 3756674 | Memory Corruption vulnerability in SAP ABAP Platform Baharu | SAP ABAP Platform | Sederhana | 5.3 | CVE-2026-58247 |
| 3669608 | Missing Authorization check in SAP S/4 HANA (Reprocess Bank Statement Items) Baharu | SAP S/4HANA | Sederhana | 4.3 | CVE-2026-66764 |
| 3770649 | Missing Authorization Check in SAP BusinessObjects Business Intelligence Platform (Admin Tools) Baharu | SAP BusinessObjects BI Platform | Sederhana | 4.3 | CVE-2026-66772 |
| 3781137 | Missing Authorization Check in SAP Manufacturing Integration and Intelligence (MII) Baharu | SAP Manufacturing Integration and Intelligence | Sederhana | 4.3 | CVE-2026-58244 |
| 3752864 | Missing Authorization Check in SAP NetWeaver and ABAP Platform (Change and Transport System - Customer Transport Integration Wizard) Baharu | SAP NetWeaver AS ABAP / ABAP Platform | Sederhana | 4.2 | CVE-2026-58241 |
| 3763028 | Hard-coded Credentials in SAP Advanced Planning and Optimization (Model Mix Planning) Baharu | SAP Advanced Planning and Optimization | Rendah | 3.8 | CVE-2026-58245 |
| 3739913 | Security Misconfiguration in SAP Data Services Management Console Baharu | SAP Data Services Management Console | Rendah | 3.7 | CVE-2026-44762 |