Tag: cve 2026 44756
3 articles
SAP Fixes Kernel Flaw Enabling Unauthenticated Remote Code Execution
SAP has patched a critical kernel flaw, dubbed OVERPASS, that allowed hackers to remotely take control of affected systems without any authentication, running malicious commands with ease. This maximum-severity vulnerability, rated 10.0 on the CVSS scale, was discovered by SAP security experts and has been fixed with a patch.
SAP Patches Maximum Severity Flaw in Kernel Software
A critical vulnerability, known as CVE-2026-44756, has been discovered in SAP's Extended Passport Processing, allowing attackers to corrupt memory and wreak havoc on systems. This maximum-severity flaw stems from a simple yet devastating oversight: missing boundary validation during data deserialization.
SAP Discloses Maximum-Severity Kernel Vulnerability
Over 10,000 SAP systems are exposed to the public internet, making them vulnerable to a newly disclosed maximum-severity kernel flaw, CVE-2026-44756, that allows attackers to gain admin privileges and take control. This critical vulnerability, dubbed OVERPASS, is a buffer overflow flaw that can be exploited to run arbitrary commands on vulnerable systems.