# SAP fixes four maximum-severity flaws affecting enterprise systems

_Published Tuesday, November 10, 2026 at 6:01 AM EST · Security, Infrastructure · Latest · Tier 2 — Notable_

![SAP fixes four maximum-severity flaws affecting enterprise systems — Primary](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgo4snqwJ4uD_sRDyI8zs23mcfFTWfZoSrn9n1hbUrsHbyWy-1VFL8amxqQnLb7LSTPkuSwnsPofUJT6anObg-nU4Q5e01WBb3IixN_PdL-1MJ2nOip4qSTEoVDmePRlOgjSVjvtbH8vFlQgxtGuKuqmuHWLyzIavw2Sj4VtZBlTYhUqeySbQcDMEr4Wns/s1700-nu-rw-lo-l85-e365/sap-flaws.jpg)

SAP released patches for four vulnerabilities that require neither login nor user interaction, rating each 10.0 on the CVSS severity scale. Two flaws in its Internet Communication Manager and Web Dispatcher could let network attackers execute code, the vendor says.

The other flaws could let attackers impersonate users on certain SAML single sign-on configurations or pose as an internal application server through SAP Gateway. Affected versions differ by component. The SAML flaw has no workaround, making the correction instructions or listed support package the only fix.

## Sources

- [The Hacker News](https://thehackernews.com/2026/11/sap-patches-four-cvss-100-flaws.html)

---
Canonical: https://techandbusiness.org/newswire/R02Oo-mH-Zvw5xSllrOn29
Published: 2026-11-10T11:01:38.304Z
Story chronology: 2026-11-10T10:02:00.000Z
Retrieved: 2026-11-10T13:22:13.410Z
Publisher: Tech & Business (techandbusiness.org)