Skip to content
Layer Seven Security Logo
  • Cybersecurity Extension for SAP
    • Product Information
    • Features
      • SAP RISE Security
      • S/4HANA Migration Security
      • Code Vulnerability Analysis for SAP
      • Artificial Intelligence for SAP Security
      • SIEM Integration for SAP
      • Access Risk Analysis for SAP
      • NIS2 Compliance for SAP
      • Virtual Patching for SAP
    • Buyers Guide
  • Services
    • SAP RISE Security Compliance
    • SAP Cybersecurity Assessment
    • SAP Penetration Testing
    • SAP Code Vulnerability Assessment
  • Success Stories
  • Resources
    • Case Studies
    • Whitepapers
    • News
    • Threat Reports & Advisories
  • Contact Us
Book a Demo
Book a Demo
Layer Seven Security Logo
Menu Icon

Layer Seven Security Blog

Stay up to date on the latest trends in SAP security, new threats and information on protecting your critical systems against an attack

EXECUTIVE SUMMARY

Leading the Conversation in SAP Cybersecurity

Our blog is the premier resource for CISOs and SAP security and Basis specialists seeking deep technical insights into the SAP threat landscape. Our research team provides expert analysis on emerging attack vectors targeting S/4HANA, SAP RISE, and SAP BTP, as well as practical guidance on meeting global compliance standards such as NIS2 and SOX. By translating complex vulnerability disclosures into actionable defense strategies, we empower the global SAP community to harden their mission-critical environments and implement proactive monitoring frameworks that bridge the gap between SAP teams and security operations.

Recent Articles & Threat Intel

Search

Securing SAP BTP Applications with the Application Vulnerability Report and Cybersecurity Extension for SAP

Executive Summary Recent vulnerabilities such as PHP2Shell have exposed growing security risks in SAP BTP applications, highlighting the need for automated vulnerability scanning and threat detection. SAP’s Application Vulnerability Report (AVR) addresses these risks by scanning deployed Cloud Foundry applications for known vulnerabilities using OSV and other security intelligence sources. By integrating AVR findings with

Read Article

PHP2Shell: Securing PHP Applications in SAP Environments

Summary The PHP project released security updates on 21 October 2026 for CVE-2026-109618 and CVE-2026-109619. The critical vulnerabilities can enable unauthenticated attackers to execute arbitrary code remotely in vulnerable PHP web runtimes. Successful exploitation could allow an attacker to compromise affected web applications and servers, access data available to the PHP process, disrupt application availability,

Read Article

SAP Security Notes, October 2026

SAP Security Note 3805589 addresses a critical ABAP code injection vulnerability (CVE-2026-89107, CVSS 9.9) affecting the Manage Substitution/Validation Rules functionality in SAP S/4HANA. An authenticated attacker with the required business privileges could submit specially crafted rule definitions that are processed as executable ABAP code, potentially allowing arbitrary code execution and complete compromise of the SAP

Read Article

SAP OVERPASS Update: New Attack Paths Identified and Public Exploit Toolkit Released

SAP OVERPASS (CVE-2026-44756) remains an urgent patching priority for SAP solutions. As reported in our advisory earlier this month, the vulnerability affects the processing of SAP Extended Passport (EPP) data in shared SAP Kernel code. It can enable attackers to execute arbitrary operating system commands with SAP service account privileges by triggering memory corruption through

Read Article

SAP OVERPASS Vulnerability: Protecting SAP Systems from CVE-2026-44756

Summary SAP issued an urgent security update this week to address the critical vulnerability CVE-2026-44756, commonly known as OVERPASS. The vulnerability has the highest possible severity rating, with a CVSS score of 10.0, and affects a wide range of SAP solutions. OVERPASS could enable threat actors to disrupt SAP services, access sensitive information, change system

Read Article

SAP Security Notes, September 2026

SAP Security Note 3747649 addresses CVE-2026-44756, a critical vulnerability known as OVERPASS, affecting SAP Extended Passport (EPP) Processing within the SAP kernel. Extended Passport is a tracing mechanism used by SAP applications and infrastructure components to track requests across distributed SAP landscapes. The vulnerability arises from insufficient boundary validation during the processing of EPP data,

Read Article

Managing Critical Access and Segregation of Duties Risks in SAP S/4HANA

Summary This article examines the challenges of access governance in SAP S/4HANA, the role of solutions such as SAP GRC Access Control in automating risk analysis, and the limitations organizations often face when interpreting and remediating access risks. It also explores how the Cybersecurity Extension for SAP (CES) enhances access risk management through more than

Read Article

SAP Security Notes, August 2026

SAP Security Note 3714806 patches a critical memory corruption vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform, tracked as CVE-2026-34265 with a CVSS score of 9.8. An unauthenticated remote attacker can exploit improper boundary validation in DIAG protocol parsing to corrupt memory, potentially disclose sensitive information, affect system integrity, or cause system crashes.

Read Article

Securing the SAP Foundation: Protecting SUSE Linux Enterprise Server for SAP Applications

Executive Summary Operating-system security is a critical component of protecting SAP S/4HANA and SAP HANA environments, particularly where workloads run on SUSE Linux Enterprise Server. Weak permissions, unnecessary services, insecure remote access, missing patches, exposed ports, and inadequate logging can allow attackers to bypass application-level controls and compromise critical SAP resources. These weaknesses can also

Read Article

SAP Security Notes, July 2026

Hot news note 3747367 addresses a critical memory corruption vulnerability in SAP NetWeaver Application Server ABAP, tracked as CVE-2026-44747. An authenticated attacker could exploit faulty memory-management logic to perform an out-of-bounds stack write, potentially gaining unauthorized access to data, modifying information, or causing system unavailability. The vulnerability therefore has a high impact on confidentiality, integrity,

Read Article

Security Logging for SAP BTP

As adoption of SAP BTP grows, so does the need to maintain trust in the business processes that depend on the platform. As organizations increasingly rely on BTP to extend SAP functionality and support analytics, automation, integration, and AI-enabled innovation, it becomes essential to monitor security-relevant events across global accounts, subaccounts, connections, integrations, and application

Read Article

SAP Security Notes, June 2026

SAP security note 3746332 addresses CVE-2026-44748, an XML Signature Wrapping vulnerability in SAML authentication for SAP NetWeaver AS ABAP and ABAP Platform. The vulnerability allows an authenticated low-privileged attacker to obtain a valid signed SAML or signed XML message, manipulate the XML structure, and submit a modified document that may still pass signature validation if

Read Article
« Page1 Page2 Page3 … Page27 »
Layer Seven Security Logo
  • Contact Us
  • Request a Demo
  • Our Company
  • Our Customers
  • Our Success Stories
  • Contact Us
  • Request a Demo
  • Our Company
  • Our Customers
  • Our Success Stories
  • Contact Us
  • Request a Demo
  • Our Company
  • Our Customers
  • Our Success Stories
  • Contact Us
  • Request a Demo
  • Our Company
  • Our Customers
  • Our Success Stories
Solutions
  • Cybersecurity Extension for SAP
  • Product Comparison
  • Cybersecurity Extension for SAP
  • Product Comparison
  • Cybersecurity Extension for SAP
  • Product Comparison
  • Cybersecurity Extension for SAP
  • Product Comparison
Services
  • SAP RISE Security Compliance
  • Cybersecurity Assessment
  • Code Vulnerability Assessments
  • Penetration Testing
  • SAP RISE Security Compliance
  • Cybersecurity Assessment
  • Code Vulnerability Assessments
  • Penetration Testing
  • SAP RISE Security Compliance
  • Cybersecurity Assessment
  • Code Vulnerability Assessments
  • Penetration Testing
  • SAP RISE Security Compliance
  • Cybersecurity Assessment
  • Code Vulnerability Assessments
  • Penetration Testing
Resources
  • Threat Reports & Advisories
  • Whitepapers
  • News
  • Threat Reports & Advisories
  • Whitepapers
  • News
  • Threat Reports & Advisories
  • Whitepapers
  • News
  • Threat Reports & Advisories
  • Whitepapers
  • News
Recent News

Securing SAP BTP Applications with the Application Vulnerability Report and Cybersecurity Extension for SAP

PHP2Shell: Securing PHP Applications in SAP Environments

SAP Security Notes, October 2026

Securing SAP BTP Applications with the Application Vulnerability Report and Cybersecurity Extension for SAP

PHP2Shell: Securing PHP Applications in SAP Environments

SAP Security Notes, October 2026

Browse Previous Content
Copyright © 2010-2026 Layer Seven Security Inc. All rights reserved.

Sitemap    Privacy Policy

The Gartner Peer Insights Logo is a trademark and service mark of Gartner, Inc., and/or its affiliates, and is used herein with permission. All rights reserved. Gartner Peer Insights reviews constitute the subjective opinions of individual end users based on their own experiences and do not represent the views of Gartner or its affiliates.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Layer Seven Security Logo
  • Cybersecurity Extension for SAP
    • Product Information
    • Features
      • SAP RISE Security
      • S/4HANA Migration Security
      • Code Vulnerability Analysis for SAP
      • Artificial Intelligence for SAP Security
      • SIEM Integration for SAP
      • Access Risk Analysis for SAP
      • NIS2 Compliance for SAP
      • Virtual Patching for SAP
    • Buyers Guide
  • Services
    • SAP RISE Security Compliance
    • SAP Cybersecurity Assessment
    • SAP Penetration Testing
    • SAP Code Vulnerability Assessment
  • Success Stories
  • Resources
    • Case Studies
    • Whitepapers
    • News
    • Threat Reports & Advisories
  • Contact Us