SAP Security Patch Day — August 2026

Exploited 0

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

None of this release's vulnerabilities is known to be exploited so far.

Critical 3

• Critical 10.0
  CVE-2026-58231 Public exploit Improper Authorization in SAP Commerce Cloud (Data Hub Adapter)
• Critical 9.8
  CVE-2026-34265 Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform
• Critical 9.1
  CVE-2026-44758 Code Injection vulnerability in Manufacturing Integration and Intelligence

All vulnerabilities 34