SAP Security Patch Day January 2026 Addresses Critical Injection and RCE Vulnerabilities

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SAP Releases January 2026 Security Patches for Critical Vulnerabilities On January 13, 2026, SAP issued 17 new security notes during its monthly Security Patch Day, addressing critical injection flaws and remote code execution vulnerabilities in key products. Organizations are urged to prioritize the four HotNews-level vulnerabilities, which have significant CVSS scores, as no updates were provided for prior notes. 6 sources 81