Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potential...
On September 8, 2026, SAP released security updates addressing 20 vulnerabilities, including a critical memory corruption flaw tracked as CVE-2026-44756, named OVERPASS. This vulnerability allows unauthenticated attackers to execute arbitrary commands on vulnerable SAP systems, leading to full compr...
SAP has disclosed a critical vulnerability in its Cloud SDK for Python, tracked as CVE-2026-89111, which carries a CVSS score of 10.0. This maximum-severity flaw allows remote, unauthenticated attackers to exfiltrate OAuth2 client credentials from multi-tenant applications on the SAP Business Techno...
