Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

SAP May 2026 security updates for Commerce Cloud and S/4HANA (15 vulnerabilities)

Security Patch Release
First reported
Last updated
Happening score
H score 38
1 unique sources, 1 articles

Summary

Hide ▲

SAP released its May 2026 security updates for 15 vulnerabilities across Commerce Cloud, S/4HANA, and other products, including two critical flaws that can enable code execution and SQL injection. The bulletin matters because the flaws affect widely used enterprise software that could expose sensitive data or servers if exploited. SAP said it has no evidence of exploitation in the wild.

Related Happenings

SAP NetWeaver Application Server ABAP SICF workaround for CVE-2026-44747

Advisory/Mitigation
H score40 First: 14.07.2026 21:17 Last: 14.07.2026 21:17 Sources 1

About this happening: SAP NetWeaver Application Server ABAP customers now have a temporary workaround for CVE-2026-44747 that can reduce exposure to memory corruption. The mitigation disabl...

Open Happening

SAP security patch release for CVE-2026-44747

Security Patch Release
H score40 First: 14.07.2026 21:17 Last: 14.07.2026 21:17 Sources 1

About this happening: SAP's July 2026 security updates now cover multiple vulnerabilities, including a critical SAP NetWeaver Application Server ABAP flaw. The bundle includes CVE-2026-44...

Open Happening

SAP July 2026 security updates

Security Patch Release
H score31 First: 14.07.2026 14:42 Last: 14.07.2026 14:42 Sources 1

About this happening: SAP's July 2026 security updates address 16 vulnerabilities across NetWeaver, Commerce Cloud, and AppRouter, including three critical flaws. The release closes a *...

Open Happening

SAP July 2026 security patch day

Security Patch Release
H score40 First: 14.07.2026 14:17 Last: 14.07.2026 14:17 Sources 1

About this happening: SAP released 19 new and updated security notes for its July 2026 security patch day, covering NetWeaver, Approuter, Commerce Cloud, and other products with...

Open Happening

Splunk Enterprise security update for CVE-2026-20253

Security Patch Release
H score52 First: 13.06.2026 16:23 Last: 13.06.2026 16:23 Sources 1

About this happening: Splunk released security updates for CVE-2026-20253, fixing a critical Splunk Enterprise flaw that could enable unauthenticated file operations and remote code e...

Open Happening

Timeline

  1. 12.05.2026 14:04 2 articles · 2mo ago

    SAP releases May 2026 security updates

    Initial Disclosure

    SAP released May 2026 security updates for Commerce Cloud, S/4HANA, and other products, addressing 15 vulnerabilities and shipping fixes for two critical flaws, CVE-2026-34263 and CVE-2026-34260.

    Show sources
    Open in new tab
  2. 12.05.2026 14:04 1 articles · 2mo ago

    SAP details critical Commerce Cloud and S/4HANA flaws

    Technical Analysis Update

    SAP described CVE-2026-34263 as a missing authentication check in SAP Commerce Cloud that can enable unauthenticated code execution through malicious configuration upload and code injection, and CVE-2026-34260 as a low-complexity SQL injection that can expose sensitive database information and potentially crash the application.

    Show sources
    Open in new tab