# SAP patches critical flaws that permit enterprise system takeovers

_Published Thursday, October 15, 2026 at 11:08 AM EDT · Security · Latest · Tier 2 — Notable_

![SAP patches critical flaws that permit enterprise system takeovers — Primary](https://heise.cloudimg.io/v7/_www-heise-de_/imgs/18/5/1/8/1/9/2/3/sap_patchday-a0e18bfee6e4bc6b.jpg?func=bound&height=1200&org_if_sml=1&q=85&width=1200)

SAP released security patches for critical flaws in NetWeaver Visual Composer, S/4HANA, and Manufacturing Integration and Intelligence, heise reported. The fixes form part of a release containing 16 new security advisories and 4 GitHub advisories.

Faulty access controls in Visual Composer can let attackers with low user privileges take over systems. Logged-in attackers can use specially crafted requests to execute malicious code in S/4HANA, while the Manufacturing Integration and Intelligence flaw can allow administrator-level compromise. SAP had given no indication that attackers were already exploiting the vulnerabilities.

## Sources

- [heise](https://www.heise.de/en/news/SAP-Patchday-Attackers-can-take-over-systems-11486462.html)

---
Canonical: https://techandbusiness.org/newswire/z960G0CrXdjfohXAuFrcss
Published: 2026-10-15T15:08:24.761Z
Story chronology: 2026-10-13T13:17:00.000Z
Retrieved: 2026-10-15T17:43:04.191Z
Publisher: Tech & Business (techandbusiness.org)