SAP Patches Critical Extended Passport Processing Vulnerability
Teaser from the source
Affecting the SAP kernel code, the flaw allows unauthenticated, remote attackers to run arbitrary commands, recover secrets, and modify data. The post SAP Patches Critical Extended Passport Processing Vulnerability appeared first on SecurityWeek .
This is the RSS-feed teaser. Read the full article at the original source.
Read at SecurityWeekMore on Processing
Other advisories
- HighCVE-2026-119188Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message
- HighCVE-2026-119187Forge: Denial of service in TLS record processing via call stack exhaustion
- Not ratedosv:CVE-2026-114408NULL pointer dereference in ICMPv6 Packet Too Big processing when the destination table is full
- Not ratedosv:CLEANSTART-2020-VZ41053Failure to properly bounds-check a buffer used for processing DHCP options allows a malicious server (or an entity masquerading as a server) to cause a buffer overflow (and resulting crash) in dhcl...
- Not ratedosv:CLEANSTART-2024-DM47223Failure to correctly handle null bytes when processing HTML entities resulted in Firefox incorrectly parsing these entities
- Not ratedosv:CLEANSTART-2023-MT89346invalid authentication sequence could result in the hostapd process terminating due to missing state validation steps when processing the SAE confirm message when in hostapd/AP mode
- Not ratedosv:CLEANSTART-2024-BH36220On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in <code>GMPDecodeData</code>
- Not ratedosv:CLEANSTART-2024-XG79226When processing a MAR update file, after the signature has been validated, an invalid name length could result in a heap overflow, leading to memory corruption and potentially arbitrary code execution
Other news entries
- Ireland's Employment Permits Portal breach: stolen data for general customers limited to namesBreachpwn.watch
- Trusting Unsloth’s trust setting could mean executing malicious codeNewsCSO Online
- Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service VulnerabilityNewsCisco PSIRT
- Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG ProcessingNewsThe Hacker News
- Norway fines Microsoft ad firm $9.6 million over Grindr data sharingNewsBleepingComputer
- IQVIA fined $7.8 million for failing to properly anonymize health dataNewsBleepingComputer
- Google fined €403 million over location data privacy violationsNewsBleepingComputer
- NCSC-2026-0356 [1.00] [M/H] Kwetsbaarheden verholpen in diverse SAP-productenNewsNCSC-NL
Source: https://www.securityweek.com/sap-patches-critical-extended-passport-processing-vulnerability/
ID