<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"><channel><title>SAP security news · Threat Recap</title><link>vendors/sap.html</link><description>Security news, advisories and CVEs for SAP</description><lastBuildDate>Mon, 19 Oct 2026 12:28:44 GMT</lastBuildDate>
<item><title>Hackers Exploit D-Link, Ubiquiti and SAP Flaws to Hijack Devices for Proxy Networks</title><link>https://cybersecuritynews.com/hackers-exploit-d-link/</link><guid isPermaLink="false">1pd84ry</guid><pubDate>Fri, 16 Oct 2026 09:02:30 GMT</pubDate><description>Cybersecurity News. A cybercrime campaign has compromised at least 143 devices in 34 countries by exploiting flaws in D-Link, Ubiquiti and SAP products. The attackers installed Pawns.app proxy software on victim devices, turning their internet connections into residential proxy…</description><category>Vulnerability</category></item>
<item><title>SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities</title><link>https://www.securityweek.com/sap-patches-critical-netweaver-s-4hana-vulnerabilities/</link><guid isPermaLink="false">nmmsow</guid><pubDate>Wed, 14 Oct 2026 06:12:10 GMT</pubDate><description>SecurityWeek. The bugs could allow attackers to invoke internal operations and execute code, completely compromising the system.</description><category>Vulnerability</category></item>
<item><title>SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft</title><link>https://thehackernews.com/2026/10/sap-discloses-critical-cvss-10-flaw-in.html</link><guid isPermaLink="false">e4bcv2</guid><pubDate>Tue, 13 Oct 2026 17:28:50 GMT</pubDate><description>The Hacker News. A flaw in SAP&#39;s Cloud SDK for Python can send an application&#39;s OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant applications on SAP Business Technology Platform (BTP) that…</description><category>Vulnerability</category></item>
<item><title>SAP warns of maximum severity OAuth2 SSRF security flaw</title><link>https://www.bleepingcomputer.com/news/security/sap-warns-of-maximum-severity-oauth2-ssrf-security-flaw/</link><guid isPermaLink="false">joyzt1</guid><pubDate>Tue, 13 Oct 2026 13:51:02 GMT</pubDate><description>BleepingComputer. SAP has addressed 20 security flaws across multiple products in its October 2026 security updates, including a maximum-severity vulnerability in the Cloud SDK for Python. [...]</description><category>Vulnerability</category></item>
</channel></rss>
