SecurityBleepingComputerabout 1 hour ago
SAP warns of maximum severity 'OVERPASS' kernel vulnerability
1 min read
SAP patched 20 vulnerabilities, including OVERPASS (CVE-2026-44756), a maximum-severity buffer overflow in the SAP Kernel's Extended Passport Protocol library. Exploitation lets unprivileged attackers run arbitrary commands with admin privileges. Onapsis estimates over 10,000 Internet-facing SAP systems are potentially exposed. SAP also fixed S4GET (CVE-2026-58240), a critical authentication bypass in SAP NetWeaver Message Server.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
