SAP's January 2026 Security Updates Patch Critical Vulnerabilities

Back Securityweek

SAP's January 2026 Security Updates Patch Critical Vulnerabilities

Securityweek • January 13, 2026

Share: View original

SAP has released 17 security notes, including four that address critical SQL injection, RCE, and code injection vulnerabilities.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SAP Releases January 2026 Security Patches for Critical Vulnerabilities On January 13, 2026, SAP issued 17 new security notes during its monthly Security Patch Day, addressing critical injection flaws and remote code execution vulnerabilities in key products. Organizations are urged to prioritize the four HotNews-level vulnerabilities, which have significant CVSS scores, as no updates were provided for prior notes. 6 sources 81

Extracted Entities

Attack Types (3)

Code Injection Remote Code Execution Sql Injection