SAP Addresses Critical Vulnerabilities in NetWeaver and S/4HANA

SAP has issued 22 security notes to address four critical vulnerabilities during its October 2026 Security Patch Day. The most severe, an OAuth2 SSRF flaw, poses a significant risk to multi-tenant applications, potentially allowing attackers to exfiltrate sensitive data. The updates are crucial for maintaining the security integrity of SAP systems, especially given the potential for full system compromise from these vulnerabilities.