Patch days / July 2026

SAP Security Patch Day — July 2026

Tuesday, 14 July 2026

Vulnerabilities: 15
Critical: 3
High: 4
Zero-days: 0
Public exploit: 0

Exploited 0

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

None of this release's vulnerabilities is known to be exploited so far.

Critical 3

Critical 9.9
CVE-2026-44747 Memory Corruption vulnerability in SAP NetWeaver Application Server ABAP
Critical 9.1
CVE-2026-27690 HTTP Request Smuggling in SAP Approuter
Critical 9.1
CVE-2026-44761 Insecure Sample Credentials in SAP Commerce Cloud

All vulnerabilities 15

Critical3 Show

Critical 9.9
CVE-2026-44747 Memory Corruption vulnerability in SAP NetWeaver Application Server ABAP
Critical 9.1
CVE-2026-27690 HTTP Request Smuggling in SAP Approuter
Critical 9.1
CVE-2026-44761 Insecure Sample Credentials in SAP Commerce Cloud

High4 Show

Medium7 Show

Low1 Show

Low 3.7
CVE-2026-44753 Information Disclosure vulnerability in SAP HANA Extended Application Services classic model (User Self Service)