Skip to content
Threat Feed
Subscribe

Product

S/4HANA

3 briefs RSS
critical advisory

Memory Safety Vulnerability in Extended Passport Protocol Library

An unauthenticated remote code execution vulnerability (CVE-2026-44756) in the Extended Passport Protocol library allows attackers to trigger crashes or potentially execute code via malformed network headers.

Extended Passport Protocol +13
1t 1c updated
critical advisory

Exploitation of CVE-2026-44747 in SAP NetWeaver ABAP via Memory Corruption

An authenticated attacker can exploit CVE-2026-44747, an out-of-bounds write vulnerability in SAP NetWeaver Application Server ABAP, to cause memory corruption leading to unauthorized data access, modification, or system unavailability, severely impacting confidentiality, integrity, and availability.

SAP NetWeaver Application Server ABAP +25 cve-2026-44747 memory-corruption sap netweaver abap out-of-bounds-write
4t 3c updated
critical threat

Shai-Hulud Malware Used in Supply Chain Attack via Compromised npm Packages

The Shai-Hulud malware was used in a large-scale software supply-chain attack compromising hundreds of packages across open-source software ecosystems by compromising developer secrets and CI/CD pipelines.

router +11 TeamPCP supply-chain supply-chain-attack npm pypi credential-theft shai-hulud
3r 7t 3i