VulnSocial

CVE-2026-44761Patch

LOWCVSS 9.1 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

SAP Commerce Cloud could retain a sample OAuth2 client with publicly documented sample credentials originating from sample configuration provided in SAP Help Portal documentation. If left unchanged, an unauthenticated attacker could use these well-known credentials to obtain a valid access token and invoke certain APIs to read and modify data. Successful exploitation results in high impact on confidentiality and integrity, with no impact on availability.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-1392

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 8 mentions across 5 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 6 signals
  • Technical details provided in 6 signals
  • General: 1 classified signal
  • Disclosure: 1 classified signal
  • Peaked 4d ago at 3 mentions (2026-07-14); latest day: 1
  • 8 total mentions across 5 days

Deep dive

Activity timeline8 mentions / 5d
01223Mentions · 2026-07-14: 3Mentions · 2026-07-15: 2Mentions · 2026-07-16: 1Mentions · 2026-07-22: 1Mentions · 2026-08-09: 1Patch / Workaround · 2026-07-14: 3Patch / Workaround · 2026-07-15: 2Patch / Workaround · 2026-07-16: 1Technical Details · 2026-07-14: 3Technical Details · 2026-07-15: 2Technical Details · 2026-07-16: 107-1407-1507-1607-2208-09
Signal classification3 categories
Patch
675.0%
General
112.5%
Disclosure
112.5%
Referenced assets8 URLs
Classification over time
DateTotalLabels
2026-07-143
Patch3
2026-07-152
Patch2
2026-07-161
Patch1
2026-07-221
General1
2026-08-091
Disclosure1
Full discourse8 posts
  • Modat@modat_magnify
    Patch

    ⚠️SAP NetWeaver AS ABAP – Out-of-Bounds Write / Memory Corruption (CVSS 9.9) SAP has patched CVE-2026-44747, a critical out-of-bounds write flaw in SAP NetWeaver Application Server ABAP, as part of its July 2026 Security Patch Day. An authenticated attacker can leverage logical errors in memory management to trigger memory corruption, potentially leading to unauthorised data access, data modification, or system unavailability. It was fixed alongside two other critical flaws: CVE-2026-27690 (CVSS 9.1), an HTTP request/response smuggling issue in SAP Approuter, and CVE-2026-44761 (CVSS 9.1), a default-credentials flaw in SAP Commerce Cloud. Mitigation: Install the patched ABAP Kernel version per SAP's July 2026 notes. As a temporary workaround, SAP proposes disabling all ICF nodes with a specific property in the SICF transaction, though this also disables SAP GUI for HTML and is not viable for all customers. There is no evidence of exploitation in the wild yet. Modat Magnify Query: product="SAP NetWeaver" The platform: https://magnify.modat.io/ Reference: https://support.sap.com/en/my-support/knowledge-base/security-notes-news/july-2026.html #Modat #ModatMagnify #threatintel #vulnerability #CVE202644747 #SAP #NetWeaver #ABAP #infosec #Critical

    Post summary

    SAP released a patch for CVE-2026-44747, an out-of-bounds write flaw in NetWeaver ABAP, detailing the fix and a temporary workaround, and confirms no active exploitation has been observed.

    02040565
    1.8K followersView on X
  • にゃん☆たく/takumi.a@taku888infinity
    Patch

    今日のパッチチューズデー（MS一旦割愛） ◆Ivanti（クリティカルなし） CVE-2026-14903　Xtractionのパストラバーサルで任意ファイル読取 https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Xtraction-CVE-2026-14902-CVE-2026-14903?l… ◆Fortinet（クリティカルなし） CVE-2025-53379　FortiAuthenticator GUIの境界外読取り CVE-2026-59835　FortiSandboxのVNC無認証アクセス https://www.fortiguard.com/psirt?filter=1&version=&severity=5&severity=4&severity=3&severity=2 ◆SAP CVE-2026-44747　NetWeaver ABAPのメモリ破損で任意コード実行恐れ CVE-2026-27690　SAP ApprouterのHTTPリクエストスマグリング CVE-2026-44761　Commerce Cloudのサンプル認証情報が残存 CVE-2026-40128　NetWeaver Javaのディレクトリトラバーサル https://support.sap.com/en/my-support/knowledge-base/security-notes-news/july-2026.html ◆Adobe（今日多すぎ） Adobe ColdFusion（APSB26-82） CVE-2026-48318：パストラバーサルによる任意コード実行  CVE-2026-48322：コードインジェクションによる任意コード実行 CVE-2026-48284：入力検証不備による任意コード実行 CVE-2026-48321：認可不備による権限昇格 CVE-2026-48325：認証不備による任意コード実行  CVE-2026-48319：パストラバーサルによる任意コード実行  CVE-2026-48324：SQLインジェクションによる任意コード実行  CVE-2026-48327：認可不備による任意コード実行 CVE-2026-48320：反射型XSSによる権限昇格  CVE-2026-48328：入力検証不備による保護機能回避  CVE-2026-48332：SSRFによる保護機能回避  CVE-2026-48338：パストラバーサルによる任意ファイル読取 Adobe Commerce（APSB26-73） CVE-2026-48356：危険ファイルアップロードによる権限昇格 CVE-2026-48358：出力処理不備による任意コード実行 CVE-2026-47994：格納型XSSによる権限昇格 CVE-2026-47988：認可不備による保護機能回避 CVE-2026-47984：認可不備による保護機能回避 CVE-2026-47995：B2B機能の格納型XSSによる権限昇格 CVE-2026-47996：認可不備による保護機能回避 CVE-2026-47992：入力検証不備による権限昇格 Adobe Experience Manager（APSB26-74） CVE-2026-48259：SSRFによる任意コード実行 CVE-2026-48359：XXEによる任意コード実行 CVE-2026-48252：認証不備による保護機能回避 CVE-2026-48310：パストラバーサルによる任意読取 https://helpx.adobe.com/security.html

    Post summary

    The post lists multiple CVEs with vendor advisory links and detailed technical descriptions, focusing on informing readers about available patches for the vulnerabilities. No PoC, exploit, or active exploitation claims are present.

    000421.6K
    11.8K followersView on X
  • CERT-PY@CERTpy
    General

    ⚠️ Vulnerabilidades en productos SAP ❗ CVE-2026-44761 ❗ CVE-2026-44747 ❗ CVE-2026-27690 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-sap-8/ https://t.co/6Fnqu3t1hg

    Post summary

    The tweet lists three SAP-related CVEs and points to external links for more information, but it does not provide specifics on exploitation, patches, or technical vulnerability details.

    01001272
    6.7K followersView on X
  • Xavier Rivera@XavierRiveraX
    Patch

    SAP patches 16 vulnerabilities in its July 2026 security update, three critical. NetWeaver AS ABAP gets fixed for a memory corruption bug (CVE-2026-44747) that risks unauthorized data access or system outages. SAP Commerce Cloud shipped with default credentials (CVE-2026-44761), letting attackers pull valid access tokens. No known exploitation yet. SAP runs 99 of the top 100 companies worldwide.

    Post summary

    SAP released a July 2026 update patching 16 vulnerabilities, including two critical CVEs, with no known exploitation yet.

    01010126
    602 followersView on X
  • IntegSec@integ_sec
    Disclosure

    CVE-2026-44761: Insecure Sample Credentials in SAP Commerce Cloud - What It Means for Your Business and How to Respond https://hubs.li/Q04slGdz0

    Post summary

    The article announces CVE-2026-44761, which involves insecure sample credentials in SAP Commerce Cloud, but it does not provide technical details, exploit code, or patch information.

    0000038
    32 followersView on X
  • Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters
    Patch

    #CVE-2026-44761 - Critical supply chain risk in #SAP Commerce #Cloud. Sample OAuth2 credentials left unchanged allow unauthenticated data read/write. #CVSS 9.1. Check and remove defaults immediately. #CVEAlert #DevSecOps #devops #Developer #sysadmin #infosec https://www.valtersit.com/cve/CVE-2026-44761/

    Post summary

    The post discloses CVE‑2026‑44761, a critical OAuth2 credential misconfiguration in SAP Commerce Cloud, and recommends removing default credentials as a mitigation.

    0000054
    982 followersView on X
  • TECHEPAGES@techepages
    Patch

    🚨 SAP patches a critical CVSS 9.9 flaw in NetWeaver ABAP that could expose or modify data — plus two more 9.1 criticals 🔹 CVE-2026-44747: out-of-bounds write in NetWeaver ABAP enabling data theft, tampering, or downtime 🔹 CVE-2026-27690: HTTP request smuggling in SAP Approuter exposes user responses & triggers DoS 🔹 CVE-2026-44761: default OAuth credentials in Commerce Cloud let attackers read & modify data 🔹 No in-the-wild exploitation yet — but patch now and audit for the sample OAuth client

    Post summary

    SAP has issued patches for three critical vulnerabilities, detailing the technical nature of each flaw, but no evidence of in‑the‑wild exploitation has yet been reported.

    0000059
    23 followersView on X
  • TECHEPAGES@techepages
    Patch

    🚨 SAP's July 2026 Patch Day fixes 16 new security issues, led by a critical memory corruption flaw in NetWeaver AS ABAP (CVE-2026-44747, CVSS 9.9) affecting kernel versions 7.22 through 9.20 — both legacy and current deployments. ⚠️ A second critical bug (CVE-2026-27690, CVSS 9.1) enables HTTP Request Smuggling in SAP Approuter, potentially letting attackers bypass authentication or poison caches across SAP BTP landscapes. 🔹 Insecure sample credentials patched in Commerce Cloud (CVE-2026-44761, CVSS 9.1) 🔹 DLL hijacking in SAProuter on Windows (CVSS 8.4) & Apache Camel flaws in Integration Suite (CVSS 8.8) 🔹 3 earlier notes updated, incl. NetWeaver AS Java directory traversal (CVSS 9.0) 🔹 SAP urges immediate patching via SAP Note 3747367 & Support Portal

    Post summary

    SAP's July 2026 Patch Day resolves 16 high‑risk security issues, including critical memory corruption and HTTP request smuggling, with an urgent patching recommendation via SAP Note 3747367.

    0000074
    21 followersView on X

Explore more

Back to dashboard