SAP Security Patch Day — October 2026
Tuesday, 13 October 2026
Exploited 0
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
None of this release's vulnerabilities is known to be exploited so far.
Critical 4
- Critical 10.0
- Critical 9.9
- Critical 9.9
- Critical 9.1
Public exploit code 1
Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.
- High 7.5
All vulnerabilities 20
Critical4 ShowHide
- Critical 10.0
- Critical 9.9
- Critical 9.9
- Critical 9.1
High3 ShowHide
- High 8.8
- High 7.5
- High 7.1
Medium12 ShowHide
- Medium 6.5
- Medium 6.5
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 5.9
- Medium 5.4
- Medium 5.3
- Medium 4.7
- Medium 4.4
- Medium 4.3
- Medium 4.2
Low1 ShowHide
- Low 3.5