Product
Critical Vulnerabilities in SAP NetWeaver and S/4HANA
2 TTPs 4 CVEsSAP has released security updates addressing four critical-severity vulnerabilities, including SSRF, code injection, and authorization bypasses, across multiple enterprise platforms.
Memory Safety Vulnerability in Extended Passport Protocol Library
1 TTP 1 CVEAn unauthenticated remote code execution vulnerability (CVE-2026-44756) in the Extended Passport Protocol library allows attackers to trigger crashes or potentially execute code via malformed network headers.
Shai-Hulud Malware Used in Supply Chain Attack via Compromised npm Packages
3 rules 7 TTPs 3 IOCsThe Shai-Hulud malware was used in a large-scale software supply-chain attack compromising hundreds of packages across open-source software ecosystems by compromising developer secrets and CI/CD pipelines.
SAP Commerce Cloud Unauthenticated Remote Code Execution (CVE-2026-34263)
2 rules 1 TTP 1 CVESAP Commerce Cloud is vulnerable to unauthenticated malicious configuration upload and code injection due to improper Spring Security configuration, resulting in arbitrary server-side code execution.