SAP S/4HANA — Cyber Threats, Attacks & Incidents

Related Threat Clusters

• Critical SQL Injection Vulnerability Discovered in SAP Products

  On April 14, 2026, SAP released a critical security patch addressing 19 vulnerabilities, including CVE-2026-27681, a severe SQL injection flaw with a CVSS score of 9.9. This vulnerability affects SAP Business Planning…

  9 articles · Updated April 14, 2026
• SAP Addresses Critical Vulnerabilities in Commerce Cloud and S/4HANA

  On May 12, 2026, SAP released security updates for 15 vulnerabilities, including two critical flaws in Commerce Cloud and S/4HANA. The first critical vulnerability (CVE-2026-34263) allows unauthenticated attackers to…

  6 articles · Updated May 12, 2026
• Critical RCE Vulnerability in BeyondTrust Software Requires Immediate Patching

  BeyondTrust has issued a warning regarding a critical remote code execution (RCE) vulnerability in its Remote Support and Privileged Remote Access software. The flaw, tracked as CVE-2026-1731, allows unauthenticated…

  1125 articles · Updated February 9, 2026
• Critical Code Injection Vulnerability in SAP Solution Manager Disclosed

  SAP has released critical security patches addressing a code injection vulnerability in SAP Solution Manager (ST 720), tracked as CVE-2025-42880. This vulnerability is rated Critical and affects users of the affected…

  7 articles · Updated December 9, 2025
• SAP Addresses 17 Security Vulnerabilities in January 2026 Patchday

  On January 2026 Patchday, SAP released 17 security notes addressing vulnerabilities in its software. Among these, four vulnerabilities are classified as critical risks, including a SQL injection vulnerability in SAP…

  1 article · Updated January 13, 2026
• Microsoft Addresses Six Actively Exploited Zero-Day Vulnerabilities

  On February 10, 2026, Microsoft released a security update addressing 59 vulnerabilities, including six zero-day flaws that were actively exploited prior to the patch. The vulnerabilities affect various Microsoft…

  70 articles · Updated February 10, 2026
• SAP Addresses Critical Vulnerabilities in December Security Update

  SAP has issued its December security updates, fixing 14 vulnerabilities across various products, including three critical-severity flaws. The most severe, CVE-2025-42880, has a CVSS score of 9.9 and involves a code…

  2 articles · Updated December 9, 2025
• SAP Releases November Security Updates Addressing Critical Vulnerabilities

  SAP has released its November security updates, which include 18 new security advisories. Among these, a critical vulnerability in the SQL Anywhere Monitor (CVE-2025-42890) has been identified, receiving a maximum CVSS…

  3 articles · Updated November 11, 2025
• Critical Windows Shell Zero-Day Vulnerability Exploited

  Microsoft has released updates to address a critical zero-day vulnerability in Windows Shell, tracked as CVE-2026-21510, which is actively being exploited. This security flaw allows remote attackers to bypass essential…

  5 articles · Updated February 11, 2026
• SAP Addresses Critical Flaw in SQL Anywhere Monitor with November Security Updates

  SAP announced a maximum severity security flaw in SQL Anywhere Monitor (Non-GUI), tracked as CVE-2025-42890, which involves hard-coded credentials that could allow arbitrary code execution. The flaw received a CVSS…

  5 articles · Updated November 12, 2025

Recent Intelligence Reports

• Critical Vulnerabilities in SAP Commerce Cloud and SAP S/4HANA — Csa.Sg · May 13, 2026
• May Patch Tuesday roundup: Critical holes in Windows Netlogon, DNS, and SAP S/4HANA — Csoonline · May 13, 2026
• Patch Tuesday: No zero days among 137 Microsoft CVEs, 4 Word RCEs — Scworld · May 13, 2026
• Patch Tuesday: No zero days among 137 Microsoft CVEs, 4 Word RCEs — Scmagazine · May 13, 2026
• SAP Patches Critical SQL injection Vulnerability in SAP S/4HANA — Cybersecuritynews · May 12, 2026
• SAP Patchday: Critical vulnerabilities allow unauthorized login — Heise.De · May 12, 2026
• SAP fixes critical vulnerabilities in Commerce Cloud and S/4HANA — Bleepingcomputer · May 12, 2026
• SAP's Security and Product Updates Face Market Scrutiny Ahead of Earnings () — Aktiencheck.De · April 15, 2026

Related Entities