SAP Releases September 2026 Security Patch Day Updates Addressing Critical Vulnerabilities

SAP has released 19 new security notes and one update as part of its September 2026 Security Patch Day. These updates address severe vulnerabilities across Extended Passport Processing, NetWeaver, and Cloud Application Programming, including CVE-2026-44756, a critical flaw with a maximum CVSS score of 10.0 affecting the Extended Passport Protocol library. Administrators are advised to apply these updates immediately.