Enterprise SAP GUI & NetWeaver SSO: Troubleshooting Expired SAML Token Signing Certificates with Microsoft Entra ID
Enterprise SAP GUI & NetWeaver SSO: Troubleshooting Expired SAML Token Signing Certificates with Microsoft Entra ID
MSEndpoint
intunefans.com
September 27, 2026 at 7:59 PM
Enterprise SAP GUI & NetWeaver SSO: Troubleshooting Expired SAML Token Signing Certificates with Microsoft Entra ID
There IS one person who knows exactly what happened, and she eventually explains almost every last detail. Probably not too much of a spoiler at this point that she's the woman called Netweaver who lives at the top of FirstDay...
September 27, 2026 at 8:14 AM
There IS one person who knows exactly what happened, and she eventually explains almost every last detail. Probably not too much of a spoiler at this point that she's the woman called Netweaver who lives at the top of FirstDay...
SAP NetWeaver Extended Passport Remote Code Execution https://packetstorm.news/files/232401 #exploit
September 24, 2026 at 12:33 AM
SAP NetWeaver Extended Passport Remote Code Execution https://packetstorm.news/files/232401 #exploit
New post in r/SAP by u/Ambitious-Prompt-975:
🔗 Link: https://www.reddit.com/r/SAP/comments/1wo5dd6/anyone_got_a_demosandbox_netweaver_lying_around/
🔗 Link: https://www.reddit.com/r/SAP/comments/1wo5dd6/anyone_got_a_demosandbox_netweaver_lying_around/
Anyone got a demo/sandbox netweaver lying around?
Hi people,
(TLDR see last paragraph)
I'm Mario. I built the `mcp-abap-adt`, `mcp-sap-gui` and `mcp-abap-abap-adt-api` last year.
If you worked with SAP & AI outside of Joule/BTP you probably know one of these projects.
If you don't: These are open-source projects ("mcp servers") that allow y...
www.reddit.com
September 23, 2026 at 1:02 PM
New post in r/SAP by u/Ambitious-Prompt-975:
🔗 Link: https://www.reddit.com/r/SAP/comments/1wo5dd6/anyone_got_a_demosandbox_netweaver_lying_around/
🔗 Link: https://www.reddit.com/r/SAP/comments/1wo5dd6/anyone_got_a_demosandbox_netweaver_lying_around/
Eine praeparierte Netzwerkanfrage reicht, und Extended Passport und NetWeaver machen Feierabend. Das sind die Systeme, auf denen die Buchhaltung der halben DAX-Liga laeuft. Patchday ist heute, eingespielt wird dann im Januar.
SAP-Patchday: Netzwerkanfrage legt NetWeaver lahm
www.heise.de
September 13, 2026 at 7:08 AM
Eine praeparierte Netzwerkanfrage reicht, und Extended Passport und NetWeaver machen Feierabend. Das sind die Systeme, auf denen die Buchhaltung der halben DAX-Liga laeuft. Patchday ist heute, eingespielt wird dann im Januar.
Patchday SAP: Präparierte Netzwerkanfrage ebnet Weg für Abstürze | Security www.heise.de/news/Patchda...
Patchday SAP: Präparierte Netzwerkanfrage ebnet Weg für Abstürze
Mehrere kritische Sicherheitslücken gefährden unter anderem SAP Extended Passport und NetWeaver.
www.heise.de
September 12, 2026 at 12:23 PM
Patchday SAP: Präparierte Netzwerkanfrage ebnet Weg für Abstürze | Security www.heise.de/news/Patchda...
Checked the latest #SAP #PatchDay notes? 4 critical flaws need urgent patches:
💥 CVSS 10.0 (Kernel EPP memory bug)
💥 CVSS 9.8 (NetWeaver Message Server bypass)
💥 CVSS 9.4 (Cloud CAP credential leak)
💥 CVSS 9.0 (Java GUI access control)
Patch today: support.sap.com/en/my-suppor...
#SAPSecurity
💥 CVSS 10.0 (Kernel EPP memory bug)
💥 CVSS 9.8 (NetWeaver Message Server bypass)
💥 CVSS 9.4 (Cloud CAP credential leak)
💥 CVSS 9.0 (Java GUI access control)
Patch today: support.sap.com/en/my-suppor...
#SAPSecurity
September 11, 2026 at 10:50 AM
Checked the latest #SAP #PatchDay notes? 4 critical flaws need urgent patches:
💥 CVSS 10.0 (Kernel EPP memory bug)
💥 CVSS 9.8 (NetWeaver Message Server bypass)
💥 CVSS 9.4 (Cloud CAP credential leak)
💥 CVSS 9.0 (Java GUI access control)
Patch today: support.sap.com/en/my-suppor...
#SAPSecurity
💥 CVSS 10.0 (Kernel EPP memory bug)
💥 CVSS 9.8 (NetWeaver Message Server bypass)
💥 CVSS 9.4 (Cloud CAP credential leak)
💥 CVSS 9.0 (Java GUI access control)
Patch today: support.sap.com/en/my-suppor...
#SAPSecurity
Several critical security vulnerabilities endanger SAP Extended Passport and NetWeaver, among others.
SAP Patchday: Crafted Network Request Paves Way for Crashes
Several critical security vulnerabilities endanger SAP Extended Passport and NetWeaver, among others.
www.heise.de
September 11, 2026 at 9:58 AM
Several critical security vulnerabilities endanger SAP Extended Passport and NetWeaver, among others.
SAP Patchday: Crafted Network Request Paves Way for Crashes
https://www.heise.de/en/news/SAP-Patchday-Crafted-Network-Request-Paves-Way-for-Crashes-11450408.html?utm_source=flipboard&utm_medium=activitypub
Posted into heise online international @heise-online-international-heiseonline
https://www.heise.de/en/news/SAP-Patchday-Crafted-Network-Request-Paves-Way-for-Crashes-11450408.html?utm_source=flipboard&utm_medium=activitypub
Posted into heise online international @heise-online-international-heiseonline
SAP Patchday: Crafted Network Request Paves Way for Crashes
Several critical security vulnerabilities endanger SAP Extended Passport and NetWeaver, among others.
www.heise.de
September 11, 2026 at 10:35 AM
SAP Patchday: Crafted Network Request Paves Way for Crashes
https://www.heise.de/en/news/SAP-Patchday-Crafted-Network-Request-Paves-Way-for-Crashes-11450408.html?utm_source=flipboard&utm_medium=activitypub
Posted into heise online international @heise-online-international-heiseonline
https://www.heise.de/en/news/SAP-Patchday-Crafted-Network-Request-Paves-Way-for-Crashes-11450408.html?utm_source=flipboard&utm_medium=activitypub
Posted into heise online international @heise-online-international-heiseonline
Mehrere kritische Sicherheitslücken gefährden unter anderem SAP Extended Passport und NetWeaver. #Security
Patchday SAP: Präparierte Netzwerkanfrage ebnet Weg für Abstürze
Mehrere kritische Sicherheitslücken gefährden unter anderem SAP Extended Passport und NetWeaver.
www.heise.de
September 11, 2026 at 9:48 AM
Mehrere kritische Sicherheitslücken gefährden unter anderem SAP Extended Passport und NetWeaver. #Security
Patchday SAP: Präparierte Netzwerkanfrage ebnet Weg für Abstürze
https://www.heise.de/news/Patchday-SAP-Praeparierte-Netzwerkanfrage-ebnet-Weg-fuer-Abstuerze-11450204.html?utm_source=flipboard&utm_medium=activitypub
Gepostet in Heise Security @heise-security-heiseonline
https://www.heise.de/news/Patchday-SAP-Praeparierte-Netzwerkanfrage-ebnet-Weg-fuer-Abstuerze-11450204.html?utm_source=flipboard&utm_medium=activitypub
Gepostet in Heise Security @heise-security-heiseonline
Patchday SAP: Präparierte Netzwerkanfrage ebnet Weg für Abstürze
Mehrere kritische Sicherheitslücken gefährden unter anderem SAP Extended Passport und NetWeaver.
www.heise.de
September 11, 2026 at 9:50 AM
Patchday SAP: Präparierte Netzwerkanfrage ebnet Weg für Abstürze
https://www.heise.de/news/Patchday-SAP-Praeparierte-Netzwerkanfrage-ebnet-Weg-fuer-Abstuerze-11450204.html?utm_source=flipboard&utm_medium=activitypub
Gepostet in Heise Security @heise-security-heiseonline
https://www.heise.de/news/Patchday-SAP-Praeparierte-Netzwerkanfrage-ebnet-Weg-fuer-Abstuerze-11450204.html?utm_source=flipboard&utm_medium=activitypub
Gepostet in Heise Security @heise-security-heiseonline
👤 Post by shalabhkumar (by Members):
"SSL in JAVA NetWeaver."
🔗 Link: https://community.sap.com/t5/technology-blog-posts-by-members/ssl-in-java-netweaver/ba-p/14473375
"SSL in JAVA NetWeaver."
🔗 Link: https://community.sap.com/t5/technology-blog-posts-by-members/ssl-in-java-netweaver/ba-p/14473375
September 11, 2026 at 3:41 AM
👤 Post by shalabhkumar (by Members):
"SSL in JAVA NetWeaver."
🔗 Link: https://community.sap.com/t5/technology-blog-posts-by-members/ssl-in-java-netweaver/ba-p/14473375
"SSL in JAVA NetWeaver."
🔗 Link: https://community.sap.com/t5/technology-blog-posts-by-members/ssl-in-java-netweaver/ba-p/14473375
SAP julkaisi 9. syyskuuta korjauksia kahteen kriittiseen haavoittuvuuteen: CVE-2026-44756 "OVERPASS" (CVSS 10.0) SAP Kernelissä ja CVE-2026-58240 "S4GET" (CVSS 9.8) NetWeaver Message Serverissä.
#kyberturvallisuus
#kyberturvallisuus
2026-011: Kriittiset haavoittuvuudet SAP Kernelissa ja NetWeaver Message Serverissa
9. syyskuuta 2026 SAP julkaisi osana syyskuun Security Patch Day -päivitystä tietoturvailmoituksia, jotka käsittelevät kahta kriittistä haavoittuvuutta, jotka vaikuttavat laajaan valikoimaan SAP-tuotteita. Vakavimpia on CVE-2026-44756 (CVSS 10.0), muistinhallintahaavoittuvuus SAP Extended Passport (EPP) -käsittelyssä, jonka Onapsis Research Labs (ORL) on antanut lempinimellä "OVERPASS" ja jonka se löysi sekä paljasti vastuullisesti. Toinen on CVE-2026-58240 (CVSS 9.8), jonka lempinimi on "S4GET", puuttuva todentamistarkistus SAP NetWeaver Message Serverissa. Molemmat ovat etäyhteyden kautta hyödynnettävissä ilman todentamista. Raportoivien tutkijoiden mukaan kumman tahansa onnistunut hyödyntäminen voi johtaa mielivaltaisten käyttöjärjestelmän komentojen suorittamiseen SAP-asennuksen omistajan tunnuksella, mikä johtaa vaikuttuvan järjestelmän ja sen sisältämien liiketoimintatietojen täydelliseen vaarantumiseen. CERT-EU suosittelee vahvasti soveltamista
cert.europa.eu
September 9, 2026 at 1:35 PM
SAP julkaisi 9. syyskuuta korjauksia kahteen kriittiseen haavoittuvuuteen: CVE-2026-44756 "OVERPASS" (CVSS 10.0) SAP Kernelissä ja CVE-2026-58240 "S4GET" (CVSS 9.8) NetWeaver Message Serverissä.
#kyberturvallisuus
#kyberturvallisuus
September 2026 Patch Tuesday roundup: Plugs for two zero day holes among almost 1,000 fixes in Windows
www.csoonline.com/article/4219...
www.csoonline.com/article/4219...
September 2026 Patch Tuesday roundup: Plugs for two zero day holes among almost 1,000 fixes in Windows
Microsoft also patched other bugs that analysts deem wormable, Adobe and Cisco issued critical updates, and SAP patched a critical vulnerability in NetWeaver and S/4HANA.
www.csoonline.com
September 9, 2026 at 7:15 AM
September 2026 Patch Tuesday roundup: Plugs for two zero day holes among almost 1,000 fixes in Windows
www.csoonline.com/article/4219...
www.csoonline.com/article/4219...
September 2026 Patch Tuesday roundup: Plugs for two zero day holes among almost 1,000 fixes…
www.csoonline.com/article/4219...
#Cybersecurity #ThreatIntel #Vulnerability
www.csoonline.com/article/4219...
#Cybersecurity #ThreatIntel #Vulnerability
September 2026 Patch Tuesday roundup: Plugs for two zero day holes among almost 1,000 fixes in Windows
Microsoft also patched other bugs that analysts deem wormable, Adobe and Cisco issued critical updates, and SAP patched a critical vulnerability in NetWeaver and S/4HANA.
www.csoonline.com
September 9, 2026 at 4:05 AM
September 2026 Patch Tuesday roundup: Plugs for two zero day holes among almost 1,000 fixes…
www.csoonline.com/article/4219...
#Cybersecurity #ThreatIntel #Vulnerability
www.csoonline.com/article/4219...
#Cybersecurity #ThreatIntel #Vulnerability
2026年9月のPatch Tuesdayまとめ:Windowsで約1,000件の修正、うちゼロデイ2件を解消
Microsoftはワーム化の可能性があるとアナリストが指摘するバグも修正、AdobeとCiscoは重大な更新をリリース、SAPはNetWeaverとS/4HANAの重大な脆弱性にパッチを適用 ワーム化の恐れがあるバグとゼ...
Microsoftはワーム化の可能性があるとアナリストが指摘するバグも修正、AdobeとCiscoは重大な更新をリリース、SAPはNetWeaverとS/4HANAの重大な脆弱性にパッチを適用 ワーム化の恐れがあるバグとゼ...
2026年9月のPatch Tuesdayまとめ:Windowsで約1,000件の修正、うちゼロデイ2件を解消
Microsoftはワーム化の可能性があるとアナリストが指摘するバグも修正、AdobeとCiscoは重大な更新をリリース、SAPはNetWeaverとS/4HANAの重大な脆弱性にパッチを適用 ワーム化の恐れがあるバグとゼ
blackhatnews.tokyo
September 9, 2026 at 3:36 AM
2026年9月のPatch Tuesdayまとめ:Windowsで約1,000件の修正、うちゼロデイ2件を解消
Microsoftはワーム化の可能性があるとアナリストが指摘するバグも修正、AdobeとCiscoは重大な更新をリリース、SAPはNetWeaverとS/4HANAの重大な脆弱性にパッチを適用 ワーム化の恐れがあるバグとゼ...
Microsoftはワーム化の可能性があるとアナリストが指摘するバグも修正、AdobeとCiscoは重大な更新をリリース、SAPはNetWeaverとS/4HANAの重大な脆弱性にパッチを適用 ワーム化の恐れがあるバグとゼ...
SAP September 2026 updates fix 20 flaws, including OVERPASS, a max-severity SAP Kernel memory corruption bug that can enable admin-level command execution. S4GET in NetWeaver Message Server also enables remote code execution. #SAP #OVERPASS #S4GET
SAP Warns Of Maximum Severity 'OVERPASS' Kernel Vulnerability
SAP’s September 2026 security updates fix 20 vulnerabilities, including CVE-2026-44756 (OVERPASS), a maximum-severity SAP Kernel memory corruption flaw that can let attackers run commands with administrative privileges and fully compromise SAP hosts. SAP also patched CVE-2026-58240 (S4GET) in the NetWeaver Message Server, a missing-authentication flaw that can expose entire SAP clusters to remote code execution. #CVE-2026-44756 #OVERPASS #CVE-2026-58240 #S4GET #SAPKernel #SAPNetWeaver #SAPICM
www.hendryadrian.com
September 8, 2026 at 6:45 PM
SAP’s Sept 2026 patch fixes CVE-10.0, NetWeaver, Extended Passport, CAP library leaks—urgent update needed. #SAP #SecurityUpdate #NetWeaver #CloudSecurity #Vulnerability #EnterpriseTech https://thedailytechfeed.com/sap-fixes-critical-flaws-in-netweaver-extended-passport-in-sept-2026-patch/
September 8, 2026 at 11:41 AM
SAP’s Sept 2026 patch fixes CVE-10.0, NetWeaver, Extended Passport, CAP library leaks—urgent update needed. #SAP #SecurityUpdate #NetWeaver #CloudSecurity #Vulnerability #EnterpriseTech https://thedailytechfeed.com/sap-fixes-critical-flaws-in-netweaver-extended-passport-in-sept-2026-patch/
SAPセキュリティパッチデー、NetWeaver・S/4HANA・クラウド製品にまたがる新規脆弱性19件を修正
SAPは2026年9月のセキュリティパッチデーの一環として、19件の新規セキュリティノートを公開しました。今回の修正はSAP NetWeaver全般、S/4HANA、SAP Commerce Cloud、SAP Integration Suite、SAPUI5、そしてクラウドアプリケーション開発コンポーネントにまたが...
SAPは2026年9月のセキュリティパッチデーの一環として、19件の新規セキュリティノートを公開しました。今回の修正はSAP NetWeaver全般、S/4HANA、SAP Commerce Cloud、SAP Integration Suite、SAPUI5、そしてクラウドアプリケーション開発コンポーネントにまたが...
SAPセキュリティパッチデー、NetWeaver・S/4HANA・クラウド製品にまたがる新規脆弱性19件を修正
SAPは2026年9月のセキュリティパッチデーの一環として、19件の新規セキュリティノートを公開しました。今回の修正はSAP NetWeaver全般、S/4HANA、SAP Commerce Cloud、SAP Integration Suite、SAPUI5、そしてクラウドアプリケーション開発コンポーネントにまたが
blackhatnews.tokyo
September 8, 2026 at 8:48 AM
SAPセキュリティパッチデー、NetWeaver・S/4HANA・クラウド製品にまたがる新規脆弱性19件を修正
SAPは2026年9月のセキュリティパッチデーの一環として、19件の新規セキュリティノートを公開しました。今回の修正はSAP NetWeaver全般、S/4HANA、SAP Commerce Cloud、SAP Integration Suite、SAPUI5、そしてクラウドアプリケーション開発コンポーネントにまたが...
SAPは2026年9月のセキュリティパッチデーの一環として、19件の新規セキュリティノートを公開しました。今回の修正はSAP NetWeaver全般、S/4HANA、SAP Commerce Cloud、SAP Integration Suite、SAPUI5、そしてクラウドアプリケーション開発コンポーネントにまたが...
CVE-2026-66768 - sap netweaver (sap gui for java)
The Java version of SAP’s desktop client does not properly check who is allowed to use certain functions when it talks to a back‑end system. A user with…
Too many irrelevant or confusing CVEs? Use stackflag.com
#sapnetweaver #sapse #CVE #infosec
The Java version of SAP’s desktop client does not properly check who is allowed to use certain functions when it talks to a back‑end system. A user with…
Too many irrelevant or confusing CVEs? Use stackflag.com
#sapnetweaver #sapse #CVE #infosec
CVE-2026-66768: SAP GUI for Java lets low‑privilege attacker run commands
The Java version of SAP’s desktop client does not properly check who is allowed to use certain functions when it talks to a back‑end system.
stackflag.com
September 8, 2026 at 8:30 AM
CVE-2026-66768 - sap netweaver (sap gui for java)
The Java version of SAP’s desktop client does not properly check who is allowed to use certain functions when it talks to a back‑end system. A user with…
Too many irrelevant or confusing CVEs? Use stackflag.com
#sapnetweaver #sapse #CVE #infosec
The Java version of SAP’s desktop client does not properly check who is allowed to use certain functions when it talks to a back‑end system. A user with…
Too many irrelevant or confusing CVEs? Use stackflag.com
#sapnetweaver #sapse #CVE #infosec
CVE-2026-58240 - sap netweaver (message server)
The SAP NetWeaver Message Server does not properly verify the identity of internal components when they register. Someone who can reach the server on the…
Too many irrelevant or confusing CVEs? Use stackflag.com
#sapnetweaver #sapse #CVE #infosec
The SAP NetWeaver Message Server does not properly verify the identity of internal components when they register. Someone who can reach the server on the…
Too many irrelevant or confusing CVEs? Use stackflag.com
#sapnetweaver #sapse #CVE #infosec
CVE-2026-58240: SAP NetWeaver Message Server allows unauthorized component registration
The SAP NetWeaver Message Server does not properly verify the identity of internal components when they register.
stackflag.com
September 8, 2026 at 8:30 AM
CVE-2026-58240 - sap netweaver (message server)
The SAP NetWeaver Message Server does not properly verify the identity of internal components when they register. Someone who can reach the server on the…
Too many irrelevant or confusing CVEs? Use stackflag.com
#sapnetweaver #sapse #CVE #infosec
The SAP NetWeaver Message Server does not properly verify the identity of internal components when they register. Someone who can reach the server on the…
Too many irrelevant or confusing CVEs? Use stackflag.com
#sapnetweaver #sapse #CVE #infosec
SAP-Patch-Day September 2026: Neue Sicherheitslücken
Betroffen sind unter anderem der NetWeaver Application Server, S/4HANA-Module, die Integration Suite sowie SAPUI5.
www.all-about-security.de/sap-patch-da...
#sap #sapsecurity
Betroffen sind unter anderem der NetWeaver Application Server, S/4HANA-Module, die Integration Suite sowie SAPUI5.
www.all-about-security.de/sap-patch-da...
#sap #sapsecurity
SAP-Patch-Day September 2026: Patches Jetzt Einspielen
Erfahren Sie mehr über die Sicherheitshinweise vom SAP-Patch-Day September 2026 und die kritischen Schwachstellen im System.
www.all-about-security.de
September 8, 2026 at 8:17 AM
SAP-Patch-Day September 2026: Neue Sicherheitslücken
Betroffen sind unter anderem der NetWeaver Application Server, S/4HANA-Module, die Integration Suite sowie SAPUI5.
www.all-about-security.de/sap-patch-da...
#sap #sapsecurity
Betroffen sind unter anderem der NetWeaver Application Server, S/4HANA-Module, die Integration Suite sowie SAPUI5.
www.all-about-security.de/sap-patch-da...
#sap #sapsecurity