NewsThe Hacker News
SAP Patches Four CVSS 10.0 Flaws, Including Two Enabling Remote Code Execution
More on Including
Other advisories
- MediumCVE-2026-127207Sendcloud for WooCommerce through 1.0.41 contains a missing authorization vulnerability that allows authenticated low-privileged users, including Subscribers…
- HighCVE-2026-13764The Masterstudy - Education WordPress Theme theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.151. This is …
- HighCVE-2026-16135The VibeBP plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.9.9.8.1. This is due to the plugin allowing arb…
- HighCVE-2026-15309The CourseCure Courses plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 1.5.1. This is due to a missing capabilit…
- Not ratedosv:CLEANSTART-2026-IM23671Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...
- Not ratedosv:CLEANSTART-2026-NA22425Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...
- HighCVE-2026-123866A use-after-free in Node.js HTTP/2 stream teardown can leak response memory, including the contents of other connections' response buffers, to a peer. When a…
- HighCVE-2026-123864A re-entrancy flaw in Node.js HTTPS lets an unauthenticated client read memory belonging to other connections, including TLS private keys and other users' re…
Other news entries
- Massive Microsoft 365 outage disrupts Outlook, Teams, Copilot worldwideNewsBleepingComputer
- New N-able "4EverAble2Shell" zero-day exploited hours after PoC releasedNewsBleepingComputer
- Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication BypassNewsThe Hacker News
- AI found Linux kernel bugs that remained undetected for decadesNewsCSO Online
- Node.js Fixes 16 Flaws, Including HTTP/2 Bugs That Crash Servers and Leak Other Connections' DataNewsThe Hacker News
- GreyNoise AI Cyber Index: Benchmarking AI Models on Defensive CapabilitiesNewsGreyNoise
- Critical Zoom Workplace Flaw Could Allow Unauthenticated Remote Privilege EscalationNewsThe Hacker News
- Threat Actors Exploit Openwave, Cisco BroadWorks VulnerabilitiesNewsSecurityWeek
Source: https://thehackernews.com/2026/11/sap-patches-four-cvss-100-flaws.html
ID