NetWeaver — Cyber Threats, Attacks & Incidents

Related Threat Clusters

• Critical SQL Injection Vulnerability Discovered in SAP Products

  On April 14, 2026, SAP released a critical security patch addressing 19 vulnerabilities, including CVE-2026-27681, a severe SQL injection flaw with a CVSS score of 9.9. This vulnerability affects SAP Business Planning…

  9 articles · Updated April 14, 2026
• SAP Patch Day Addresses Critical Vulnerabilities

  On March 10, 2026, SAP released 15 security notes, including two critical vulnerabilities that could allow remote code execution and system compromise. Administrators are urged to apply the patches promptly to protect…

  10 articles · Updated March 10, 2026
• SAP Addresses Critical Vulnerabilities in December Security Update

  SAP has issued its December security updates, fixing 14 vulnerabilities across various products, including three critical-severity flaws. The most severe, CVE-2025-42880, has a CVSS score of 9.9 and involves a code…

  2 articles · Updated December 9, 2025
• SAP Releases November Security Updates Addressing Critical Vulnerabilities

  SAP has released its November security updates, which include 18 new security advisories. Among these, a critical vulnerability in the SQL Anywhere Monitor (CVE-2025-42890) has been identified, receiving a maximum CVSS…

  3 articles · Updated November 11, 2025
• SAP Addresses Critical Flaw in SQL Anywhere Monitor with November Security Updates

  SAP announced a maximum severity security flaw in SQL Anywhere Monitor (Non-GUI), tracked as CVE-2025-42890, which involves hard-coded credentials that could allow arbitrary code execution. The flaw received a CVSS…

  5 articles · Updated November 12, 2025

Recent Intelligence Reports

• SAP's Security and Product Updates Face Market Scrutiny Ahead of Earnings () — Aktiencheck.De · April 15, 2026
• SAP Patches Critical FS-QUO, NetWeaver Vulnerabilities — Securityweek · March 10, 2026
• SAP fixes three critical vulnerabilities across multiple products — Bleepingcomputer · December 9, 2025
• SAP fixes hardcoded credentials flaw in SQL Anywhere Monitor — Bleepingcomputer · November 11, 2025

Related Entities