CRITICALVulnerability
Global

SAP Patches Critical Code Injection, Memory Corruption Vulnerabilities

·Source: SecurityWeek

Updated:

Executive Summary

SAP released 28 new and two updated security notes, including four notes dealing with critical-severity bugs. The post SAP Patches Critical Code Injection, Memory Corruption Vulnerabilities appeared first on SecurityWeek .

Analysis

SAP released 28 new and two updated security notes, including four notes dealing with critical-severity bugs. The post SAP Patches Critical Code Injection, Memory Corruption Vulnerabilities appeared first on SecurityWeek .
Source Attribution

Originally published by SecurityWeek on Aug 11, 2026.

Related Threats

MEDIUMVulnerabilityNEW

Revolut to open network of airport lounges across Europe

Revolut has unveiled plans for a network of premium branded airport lounges across major European destinations.

Finextra
CRITICALVulnerability

NVD CRITICAL: CVE-2026-74889 — openssl_encrypt versions before 1.4.0 use HKDF with no salt and static info para...

openssl_encrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization functions, reducing entropy extraction and determinism. Attackers can exploit predictable key derivation with identical inputs to weaken cryptographic security against multi-target attacks.

CVE-2026-74889
NIST NVD
CRITICALVulnerability

NVD CRITICAL: CVE-2026-74886 — openssl_encrypt versions before 1.4.0 contain a plugin sandbox bypass vulnerabil...

openssl_encrypt versions before 1.4.0 contain a plugin sandbox bypass vulnerability where the PluginImportGuard blocks a different set of modules than the AST analyzer's DANGEROUS_MODULES set. Attackers can bypass AST analysis through string obfuscation or encoding to import unblocked dangerous modules like sys, shutil, multiprocessing, importlib, and pickle for arbitrary code execution.

CVE-2026-74886
NIST NVD