补丁日：2026年8月
发布于 2026年8月11日 · 32 条安全说明 · 来源：SAP 安全补丁日页面
计划日期：2026年8月11日（每月第二个星期二）
- 新发布
- 30
- 更新
- 2
- 严重
- 4
- 高
- 9
- 最高 CVSS
- 10.0
- 已被利用
- 0
本月摘要
共 32 条安全说明（新发布 30 条，更新 2 条），其中严重 4 条、高 9 条，最高 CVSS 10.0。
优先修补
排序依据：是否已知被利用（CISA KEV），其次是 SAP 优先级，再次是 CVSS 分数。仅供分诊参考，不能替代您自己的风险评估。
Improper Authorization in SAP Commerce Cloud (Data Hub Adapter)
Code Injection vulnerability in SAP Manufacturing Integration and Intelligence
Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform
Code Injection vulnerability in Manufacturing Integration and Intelligence
Privilege Escalation vulnerability in SAP ABAP Developer Tools
全部安全说明
SAP 简介中写明 28 条新安全说明和 2 条更新；SAP 表格共列出 32 行（两者可能不同，例如包含 GitHub 安全公告或补发条目）。
SAP 公告中的最高优先级在 2024 年 12 月及以前标为 “Hot News”，自 2024 年 10 月起标为 “Critical”；本站统一显示为“严重”。
显示 32 / 32
| 标题 | CVE | ||||
|---|---|---|---|---|---|
| 3771065 | Improper Authorization in SAP Commerce Cloud (Data Hub Adapter) 新发布 | SAP Commerce Cloud | 严重 | 10.0 | CVE-2026-58231 |
| 3765948 | Code Injection vulnerability in SAP Manufacturing Integration and Intelligence 新发布 | SAP Manufacturing Integration and Intelligence | 严重 | 9.9 | CVE-2026-44772 |
| 3714806 | Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform 新发布 | SAP NetWeaver AS ABAP / ABAP Platform | 严重 | 9.8 | CVE-2026-34265 |
| 3758900 | Code Injection vulnerability in Manufacturing Integration and Intelligence 新发布 | SAP Manufacturing Integration and Intelligence | 严重 | 9.1 | CVE-2026-44758 |
| 3772411 | Privilege Escalation vulnerability in SAP ABAP Developer Tools 新发布 | SAP ABAP Developer Tools | 高 | 8.8 | CVE-2026-58243 |
| 3773203 | Potential buffer overflow vulnerability affects SAP Commerce Cloud in public‑cloud deployments with NGINX 新发布 | SAP Commerce Cloud | 高 | 8.1 | CVE-2026-42945 |
| 3756565 | Credentials disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Server) 新发布 | SAP BusinessObjects BI Platform | 高 | 7.9 | CVE-2026-66763 |
| 3759854 | Directory Traversal vulnerability in SAP Manufacturing Integration and Intelligence 新发布 | SAP Manufacturing Integration and Intelligence | 高 | 7.6 | CVE-2026-44763 |
| 3773304 | Remote Code Execution vulnerability in Enhanced Change and Transport System (CTS+) Attach Tool (ctsattach) 更新 | Enhanced Change and Transport System (CTS+) Attach Tool | 高 | 7.6 | CVE-2026-58233 |
| 3485073 | Denial of Service (DoS) due to use of third-party component in SAP S/4HANA (Manage Supply Protection) 新发布 | SAP S/4HANA | 高 | 7.5 | CVE-2026-66766 |
| 3758657 | Missing Authorization Check in SAP Manufacturing Integration and Intelligence 新发布 | SAP Manufacturing Integration and Intelligence | 高 | 7.3 | CVE-2026-44765 |
| 3758910 | Missing Authorization Check in SAP Manufacturing Integration and Intelligence 新发布 | SAP Manufacturing Integration and Intelligence | 高 | 7.3 | CVE-2026-44764 |
| 3786038 | Multiple vulnerabilities in SAP Business AI Platform (Approuter) 新发布 | SAP Business AI Platform | 高 | 7.0 | CVE-2026-58230, CVE-2026-66775, CVE-2026-66778, CVE-2026-66760, CVE-2026-66761, CVE-2026-66777, CVE-2026-66776, CVE-2026-66774, CVE-2026-58237, CVE-2026-58238, CVE-2026-58239 |
| 3753141 | XML External Entity Injection in SAP BusinessObjects Business Intelligence 新发布 | SAP BusinessObjects BI Platform | 中 | 6.5 | CVE-2026-58248 |
| 3757815 | Potential Information Disclosure vulnerability in SAP Commerce Cloud (Bouncy Castle Java library) 新发布 | SAP Commerce Cloud | 中 | 6.5 | CVE-2026-5598 |
| 3770868 | Improper Output Encoding Vulnerability in SAP Commerce Cloud and SAP Data Hub (Apache Log4j Core) 新发布 | SAP Commerce Cloud and SAP Data Hub | 中 | 6.5 | CVE-2026-34480 |
| 3721424 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP 新发布 | SAP NetWeaver AS ABAP / ABAP Platform | 中 | 6.3 | CVE-2026-66779 |
| 3758318 | Use of Vulnerable Third-Party Component in SAP NetWeaver AS Java (Adobe Document Services) 新发布 | SAP NetWeaver AS Java | 中 | 6.3 | CVE-2026-58235 |
| 3766473 | SQL Injection vulnerability in SAP Social Intelligence 新发布 | SAP Social Intelligence | 中 | 6.3 | CVE-2026-66770 |
| 3772071 | Cross Site Scripting (XSS) vulnerability in SAPUI5 新发布 | SAPUI5 | 中 | 6.1 | CVE-2026-66771 |
| GHSA-hc5j-q32w-c25v | Server-controlled `__next` URL is not checking cross-origin 新发布 | No SAP products impacted | 中 | 5.9 | CVE-2026-66773 |
| 3540688 | Code Injection vulnerability in SAP FICA ODN framework 更新 | SAP FICA ODN framework | 中 | 5.5 | CVE-2025-42947 |
| 3745182 | OS Command Injection vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform 新发布 | SAP NetWeaver AS ABAP / ABAP Platform | 中 | 5.5 | CVE-2026-58236 |
| 3725940 | Memory Corruption vulnerability in SAPSPrint Service 新发布 | SAPSPrint Service | 中 | 5.3 | CVE-2026-40130 |
| 3756674 | Memory Corruption vulnerability in SAP ABAP Platform 新发布 | SAP ABAP Platform | 中 | 5.3 | CVE-2026-58247 |
| 3778462 | Security Vulnerabilities in SAP Commerce Cloud (Search and Navigation) 新发布 | SAP Commerce Cloud | 中 | 4.8 | CVE-2026-33871, CVE-2025-58057 |
| 3669608 | Missing Authorization check in SAP S/4 HANA (Reprocess Bank Statement Items) 新发布 | SAP S/4HANA | 中 | 4.3 | CVE-2026-66764 |
| 3770649 | Missing Authorization Check in SAP BusinessObjects Business Intelligence Platform (Admin Tools) 新发布 | SAP BusinessObjects BI Platform | 中 | 4.3 | CVE-2026-66772 |
| 3781137 | Missing Authorization Check in SAP Manufacturing Integration and Intelligence (MII) 新发布 | SAP Manufacturing Integration and Intelligence | 中 | 4.3 | CVE-2026-58244 |
| 3752864 | Missing Authorization Check in SAP NetWeaver and ABAP Platform (Change and Transport System - Customer Transport Integration Wizard) 新发布 | SAP NetWeaver AS ABAP / ABAP Platform | 中 | 4.2 | CVE-2026-58241 |
| 3763028 | Hard-coded Credentials in SAP Advanced Planning and Optimization (Model Mix Planning) 新发布 | SAP Advanced Planning and Optimization | 低 | 3.8 | CVE-2026-58245 |
| 3739913 | Security Misconfiguration in SAP Data Services Management Console 新发布 | SAP Data Services Management Console | 低 | 3.7 | CVE-2026-44762 |