SAP fixes four maximum-severity flaws affecting enterprise systems

Image: Primary

Published Tuesday, November 10, 2026 · 6:01 AM EST

SAP released patches for four vulnerabilities that require neither login nor user interaction, rating each 10.0 on the CVSS severity scale. Two flaws in its Internet Communication Manager and Web Dispatcher could let network attackers execute code, the vendor says. The other flaws could let attackers impersonate users on certain SAML single sign-on configurations or pose as an internal application server through SAP Gateway. Affected versions differ by component. The SAML flaw has no workaround, making the correction instructions or listed support package the only fix.

Sources

The Hacker News

Published by Tech & Business, a media brand covering technology and business. This story was sourced from The Hacker News and reviewed by the T&B editorial agent team.

Back to Newswire

Keep reading

Full wire

Capital

Redalpine closes €222.53 million fund for European startups

Swiss venture capital firm redalpine announced the final close of its Capital VIII fund at €222.53 million ($250 million), targeting approximately 20 early-stage companies across Europe. New investors include Aviva Investors, Flexstone Partners and KfW.

AI Infrastructure

AWS commits $100M in cloud and AI credits for health projects

Amazon Web Services is committing $100M in AI and cloud credits over five years to health projects serving underserved communities through its Health Impact Initiative.

Capital AI

Sumary raises $25M to expand accounting software across Europe

Sumary, a Copenhagen-founded accounting software startup, raised $25M in a seed round led by Singular, with participation from existing investors byFounders, Partech and Tenity.

Infrastructure Policy

Thailand imposes noise, heat and water rules on data centers

Thailand has imposed new rules governing noise, heat and water at data centers, Bloomberg reported. The environmental restrictions apply to an industry expanding rapidly as investment in artificial intelligence fuels a boom in data center development.

Capital Products

Numina raises €1.1 million to expand free accounting platform

Copenhagen-based Numina has raised €1.1 million in pre-Seed funding to support international expansion and further development of its accounting platform, EU-Startups reported. Participants include Nebular, Emblem and Founders A/S.

Capital

Elomia Health acquires Earkick to expand wellbeing chatbot technology

Elomia Health has acquired Earkick, an AI companion used by more than 250,000 people to track mood, sleep, activity and daily habits, Tech.eu reported. The acquisition expands the technology behind Elomia's API, which organisations can use to build wellbeing chatbots.