poslední zpráva · zachyceno
SPOJENO AI EPSS < 0.01 (nejvyšší)
SAP Security Patch Day
Nell’ambito del Security Patch Day di novembre, SAP rilascia aggiornamenti di sicurezza per risolvere 42 nuove vulnerabilità, di cui 9 con gravità “critica” e 19 con gravità “alta”.
SAP FI IT US FR
CVE v události 28
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2026-109793 | – | – | < 0.01 |
| CVE-2026-109794 | – | – | < 0.01 |
| CVE-2026-109795 | – | – | < 0.01 |
| CVE-2026-109797 | – | – | < 0.01 |
| CVE-2026-109798 | – | – | < 0.01 |
| CVE-2026-109799 | – | – | < 0.01 |
| CVE-2026-109800 | – | – | < 0.01 |
| CVE-2026-109803 | – | – | < 0.01 |
| CVE-2026-109804 | – | – | < 0.01 |
| CVE-2026-109806 | – | – | < 0.01 |
| CVE-2026-109807 | – | – | < 0.01 |
| CVE-2026-120008 | 8.2 3.1 · sap | – | < 0.01 |
| CVE-2026-120009 | 7.2 3.1 · sap | – | < 0.01 |
| CVE-2026-120010 | 7.5 3.1 · sap | – | < 0.01 |
| CVE-2026-120012 | 7.5 3.1 · sap | – | < 0.01 |
| CVE-2026-120013 | 7.5 3.1 · sap | – | < 0.01 |
| CVE-2026-120014 | 7.6 3.1 · sap | – | < 0.01 |
| CVE-2026-120015 | 7.5 3.1 · sap | – | < 0.01 |
| CVE-2026-120017 | 10.0 3.1 · sap | – | < 0.01 |
| CVE-2026-76964 | 10.0 3.1 · sap | – | < 0.01 |
| CVE-2026-76965 | 9.9 3.1 · sap | – | < 0.01 |
| CVE-2026-76966 | 8.9 3.1 · sap | – | < 0.01 |
| CVE-2026-76970 | 7.5 3.1 · sap | – | < 0.01 |
| CVE-2026-76973 | 7.5 3.1 · sap | – | < 0.01 |
| CVE-2026-89103 | 10.0 3.1 · sap | – | < 0.01 |
| CVE-2026-89114 | 7.5 3.1 · sap | – | < 0.01 |
| CVE-2026-89119 | 9.6 3.1 · sap | – | < 0.01 |
| CVE-2026-89126 | 10.0 3.1 · sap | – | < 0.01 |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 10.0.
Tahle CVE jsem vytáhl z širšího textu článku: CVE-2026-44756, CVE-2026-58231, CVE-2026-89111. Neukazuju u nich proto fakta z katalogů výše, a to preventivně, protože článek se na ně mohl jen odkazovat, třeba jako na starší kauzu.
Jak se o tom psalo 4
-
· zachyceno · NCSC-FI FI
SAP Security Patch Day - November 2026
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 10.0, CVEs: CVE-2026-76964, CVE-2026-89126, CVE-2026-89103, CVE-2026-120017, CVE-2026-109803, CVE-2026-76965, CVE-2026-109795, CVE-2026-89119, CVE-2026-120014, CVE-2026-109798, CVE-2026-76966, CVE-2026-109796, CVE-2026-120008, CVE-2026-109800, CVE-2026-109799, CVE-2026-109793, CVE-2026-120010, CVE-2026-109806, CVE-2026-109807, CVE-2026-76970 (+25 other associated CVEs), Summary: This post shares the…
-
· CSIRT Itálie (ACN) IT nadpis události
SAP Security Patch Day
Nell’ambito del Security Patch Day di novembre, SAP rilascia aggiornamenti di sicurezza per risolvere 42 nuove vulnerabilità, di cui 9 con gravità “critica” e 19 con gravità “alta”.
-
· BleepingComputer US
SAP patches ICM2SHELL and PROXYGATE maximum severity flaws
SAP patched 35 vulnerabilities in its November 2026 security updates, including four maximum-severity issues affecting its NetWeaver, Web Dispatcher, and Gateway software. [...]
-
· zachyceno · CERT-FR – avis FR
Multiples vulnérabilités dans les produits SAP (10 novembre 2026)
De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.