Heise.De

SAP Addresses 17 Security Vulnerabilities in January 2026 Patchday

First seen 13 Jan 2026, 18:40 UTC • Heise.De

•78% similarity •46.9

Ask AI about this cluster

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

On January 2026 Patchday, SAP released 17 security notes addressing vulnerabilities in its software. Among these, four vulnerabilities are classified as critical risks, including a SQL injection vulnerability in SAP S/4HANA Private Cloud and On-Premise (CVE-2026-0501, CVSS 9.9). The updates aim to mitigate risks for users of SAP's business software.

ThreatCluster AI How this analysis works

Attack Flow

20 entities, 49 inferred relationships (STIX 2.1).

Technique (1)

Sql Injection

Vulnerability (10)

CVE-2026-0491
CVE-2026-0492
CVE-2026-0495
CVE-2026-0496
CVE-2026-0498
CVE-2026-0500
CVE-2026-0501
CVE-2026-0506
CVE-2026-0507
CVE-2026-0511

Affected Platform (9)

ABAP Platform
SAP Application Server For ABAP
SAP Fiori App
SAP HANA
SAP Landscape Transformation
SAP NetWeaver Application Server ABAP
SAP NetWeaver Rfcsdk
SAP S/4HANA
Wily Introscope Enterprise Manager

Relationships

CVE-2026-0491 targets ABAP Platform
CVE-2026-0491 targets SAP Application Server For ABAP
CVE-2026-0491 targets SAP Fiori App
CVE-2026-0491 targets SAP HANA
CVE-2026-0492 targets ABAP Platform
CVE-2026-0492 targets SAP Application Server For ABAP
CVE-2026-0492 targets SAP Fiori App
CVE-2026-0492 targets SAP HANA
CVE-2026-0495 targets ABAP Platform
CVE-2026-0495 targets SAP Application Server For ABAP
CVE-2026-0495 targets SAP Fiori App
CVE-2026-0495 targets SAP HANA
CVE-2026-0496 targets ABAP Platform
CVE-2026-0496 targets SAP Application Server For ABAP
CVE-2026-0496 targets SAP Fiori App
CVE-2026-0496 targets SAP HANA
CVE-2026-0498 targets ABAP Platform
CVE-2026-0498 targets SAP Application Server For ABAP
CVE-2026-0498 targets SAP Fiori App
CVE-2026-0498 targets SAP HANA
CVE-2026-0500 targets ABAP Platform
CVE-2026-0500 targets SAP Application Server For ABAP
CVE-2026-0500 targets SAP Fiori App
CVE-2026-0500 targets SAP HANA
CVE-2026-0501 targets ABAP Platform
CVE-2026-0501 targets SAP Application Server For ABAP
CVE-2026-0501 targets SAP Fiori App
CVE-2026-0501 targets SAP HANA
CVE-2026-0506 targets ABAP Platform
CVE-2026-0506 targets SAP Application Server For ABAP
CVE-2026-0506 targets SAP Fiori App
CVE-2026-0506 targets SAP HANA
CVE-2026-0507 targets ABAP Platform
CVE-2026-0507 targets SAP Application Server For ABAP
CVE-2026-0507 targets SAP Fiori App
CVE-2026-0507 targets SAP HANA
CVE-2026-0511 targets ABAP Platform
CVE-2026-0511 targets SAP Application Server For ABAP
CVE-2026-0511 targets SAP Fiori App
CVE-2026-0511 targets SAP HANA
Sql Injection targets ABAP Platform
Sql Injection targets SAP Application Server For ABAP
Sql Injection targets SAP Fiori App
Sql Injection targets SAP HANA
CVE-2026-0491 related to SAP Landscape Transformation
CVE-2026-0491 related to SAP NetWeaver Application Server ABAP
CVE-2026-0491 related to SAP NetWeaver Rfcsdk
CVE-2026-0491 related to SAP S/4HANA
CVE-2026-0491 related to Wily Introscope Enterprise Manager

Community

Browse all →

Tracked Entities in This Story

ABAP Platform SAP Application Server For ABAP SAP Fiori App SAP HANA SAP Landscape Transformation SAP NetWeaver Application Server ABAP

SAP Addresses 17 Security Vulnerabilities in January 2026 Patchday

Ask AI about this cluster

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Community

Continue Reading

Tracked Entities in This Story