Product
Critical Vulnerabilities in SAP NetWeaver and S/4HANA
2 TTPs 4 CVEsSAP has released security updates addressing four critical-severity vulnerabilities, including SSRF, code injection, and authorization bypasses, across multiple enterprise platforms.
Memory Safety Vulnerability in Extended Passport Protocol Library
1 TTP 1 CVEAn unauthenticated remote code execution vulnerability (CVE-2026-44756) in the Extended Passport Protocol library allows attackers to trigger crashes or potentially execute code via malformed network headers.
Exploitation of CVE-2026-44747 in SAP NetWeaver ABAP via Memory Corruption
4 TTPs 3 CVEsAn authenticated attacker can exploit CVE-2026-44747, an out-of-bounds write vulnerability in SAP NetWeaver Application Server ABAP, to cause memory corruption leading to unauthorized data access, modification, or system unavailability, severely impacting confidentiality, integrity, and availability.
Shai-Hulud Malware Used in Supply Chain Attack via Compromised npm Packages
3 rules 7 TTPs 3 IOCsThe Shai-Hulud malware was used in a large-scale software supply-chain attack compromising hundreds of packages across open-source software ecosystems by compromising developer secrets and CI/CD pipelines.