SAP Security Patch Day 2026
SAP Security Patch Day 2026: 10 Patch Days, 174 SAP security notes + 6 GitHub advisories, 26 Critical. Monthly counts, highest CVSS and CISA KEV status.
Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required). Coverage: this site is built from SAP’s CVE records, so notes without a CVE, notes with only third-party CVEs (for example Apache or OpenSSL), and updates to earlier notes are not covered. That is about 7% of new notes.
| Patch Day | SAP notes | GitHub advisories | Critical | High | Highest CVSS | KEV |
|---|---|---|---|---|---|---|
| October 2026October 13, 2026 | 16 | 4 | 3 | 3 | 9.9 | 0 |
| September 2026September 8, 2026 | 18 | 0 | 4 | 3 | 10.0 | 0 |
| August 2026August 11, 2026 | 23 | 1 | 3 | 6 | 10.0 | 0 |
| July 2026July 14, 2026 | 15 | 1 | 3 | 4 | 9.9 | 0 |
| June 2026June 9, 2026 | 12 | 0 | 3 | 1 | 9.9 | 0 |
| May 2026May 12, 2026 | 16 | 0 | 2 | 1 | 9.6 | 0 |
| April 2026April 14, 2026 | 17 | 0 | 1 | 1 | 9.9 | 0 |
| March 2026March 10, 2026 | 13 | 0 | 1 | 1 | 9.1 | 0 |
| February 2026February 10, 2026 | 26 | 0 | 2 | 6 | 9.9 | 0 |
| January 2026January 13, 2026 | 18 | 0 | 4 | 4 | 9.9 | 0 |