cert_eu_advisories
- Source-provided label
- Not reported
- Evidence class
- mentioned in report
- Confidence
- Not reported
- Observed
- Sep 09, 2026 13:07 UTC
- Retrieved
- Oct 08, 2026 03:40 UTC
2026-011: Critical Vulnerabilities in SAP Kernel and NetWeaver Message Server
On 8 September 2026, as part of its September Security Patch Day, SAP released Security Notes addressing two critical vulnerabilities affecting a broad range of SAP products[3]. The most severe, CVE-2026-44756 (CVSS 10.0), is a memory corruption vulnerability in SAP Extended Passport (EPP) processing, nicknamed "OVERPASS" by the Onapsis Research Labs (ORL), which discovered and responsibly disclos
Reference details
- Source category
- Government
- Report title
2026-011: Critical Vulnerabilities in SAP Kernel and NetWeaver Message Server- First reported
- Sep 09, 2026 13:07 UTC
- Last reported
- Sep 09, 2026 13:07 UTC
- Catalog updated
- Oct 08, 2026 03:40 UTC
- Record ID
35da55bbb97301fd55d6b233273cefed46b654d465e31ab752fa4e44d5ce3f01
CVEs mentioned by sources
Published indicators
Network indicators are visibly defanged. This page does not make them clickable or send them to another service.
No validated file hashes or network indicators are stored for this record.
Source observations
This record contains metadata and attribution only. It does not host, download, unpack, render, or execute malware samples.