SAP Releases August Security Update Patching 28 Vulnerabilities Including Critical CVSS 10 Flaw
SAP has released a comprehensive August security update containing 28 new security notes, a GitHub advisory, and two updates to previous fixes to address serious vulnerabilities in its corporate platforms.
The most severe issue, CVE-2026-58231, received the maximum CVSS score of 10.0 and affects the Data Hub Adapter component of SAP Commerce Cloud versions 2211 and 2211-JDK21. The flaw stems from improper authorization and can be exploited remotely without any user interaction, potentially allowing attackers to compromise cloud-based commerce environments.
Another critical vulnerability, CVE-2026-44772, scored 9.9 and targets SAP Manufacturing Integration and Intelligence versions 15.4 and 15.5. Successful exploitation enables injection of malicious code into systems responsible for integrating and monitoring industrial production processes.
The same product is also affected by CVE-2026-44758, rated 9.1, which could allow attackers to compromise applications that connect enterprise systems to factory-floor environments.
Additional issues disclosed in the update include directory traversal, SQL injection, XSS, XXE, hardcoded credentials, and operating system command injection, expanding the scope across multiple corporate components.
SAP recommends that administrators first identify vulnerable systems and apply patches classified as critical before addressing lower-severity issues.
Related articles
Attackers Exploit Critical CVE-2026-59310 in VMware vCenter for Persistent Remote Access
A critical vulnerability identified as CVE-2026-59310 in Broadcom VMware vCenter Server is being actively exploited in the wild against internet-exposed instances. The flaw resides in the Syslog server component and enables remote code execution through a path traversal weakness, carrying a CVSS score of 9.8. Attackers have been observed deploying malicious cron jobs and the reverse_ssh tool to establish persistent outbound command-and-control channels since early August 2026. The campaign has impacted 361 unique IP addresses across 47 countries, with notable concentrations in Germany, the United States, Turkey, Iran, and France. Broadcom has released patches under advisory VMSA-2026-0006.1, which also addresses the related CVE-2026-59309, and strongly recommends immediate updates along with network segmentation and log reviews. No workarounds exist, making prompt patching the only effective mitigation.
Zoom Patches Zoomsday Vulnerability Enabling Remote Code Execution in Meetings
Zoom has addressed four vulnerabilities that could allow attackers to compromise meeting participants, including flaws leading to remote code execution without any victim interaction. The most severe issue, CVE-2026-53413, rated 8.3 and nicknamed Zoomsday, resides in the annotation feature used for drawing, highlighting, or adding text during screen sharing. This component processes network data using fixed 128-byte buffers without proper size validation, enabling memory corruption that alters program execution flow. Researchers demonstrated the attack on macOS by silently launching Safari on the victim's machine. The flaws affect Zoom Workplace, Zoom Rooms, Meeting SDK, and VDI clients. Users must update to patched versions such as Workplace 7.1.5 or 7.0.6, and Zoom Rooms or Meeting SDK 7.1.5 to mitigate annotation-related risks. No active exploitation has been observed publicly, yet centralized enterprise deployments require priority updates since attacks can occur during live meetings.
Agent, Scan or Beyond: Modern Methods for Comprehensive Infrastructure Vulnerability Scanning
The eighth installment in the Vulnerability Management for Beginners series explains why traditional scanning approaches no longer cover today's dynamic environments. It details three classic methods—Host Discovery, Pentest, and Audit—alongside agent-based scanning, cloud snapshot techniques, passive traffic analysis, container and SCA tools, and integrations with existing IT systems. The guide stresses that agents from Tenable and Qualys complement but do not replace network scanning, while Orca Security and Wiz pioneered disk snapshot analysis for short-lived cloud instances. It also covers container image scanning with Trivy and Grype before deployment, passive monitoring for OT environments, and the importance of combining multiple data sources to eliminate blind spots. Practical recommendations include scanning frequency by asset type and six post-scan steps for effective remediation.
CVE-2026-20349: Cisco ASA and FTD Firewalls Face Remote DoS in SSL VPN, Already Exploited
Cisco has disclosed a high-severity denial-of-service vulnerability affecting its Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense products. The flaw, tracked as CVE-2026-20349, resides in the SSL VPN component and allows unauthenticated remote attackers to trigger device reboots by sending specially crafted HTTP requests. The issue also impacts FTD deployments using Zero Trust Network Access. With a CVSS v3.1 base score of 8.6, the vulnerability has already been observed in active exploitation campaigns since August 2026. Cisco released hotfixes for both affected platforms and strongly urges immediate updates, while confirming that Secure Firewall Management Center remains unaffected.