Cybersecurity articles tagged #SAP on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/fortisandbox-command-injection-cve-2026-25089-critical-vendor-patcheshttps://runtimerebel.com/blog/fortisandbox-command-injection-cve-2026-25089-critical-vendor-patchesCritical patches from Fortinet, Ivanti, and SAP address vulnerabilities including CVE-2026-25089 (FortiSandbox command injection), enabling RCE and info disclosure.Wed, 10 Jun 2026 17:14:48 GMTCVE-2026-25089FortiSandboxFortinetIvantiSAPCommand InjectionRCEVulnerability Managementhttps://runtimerebel.com/blog/sap-netweaver-commerce-cloud-urgent-critical-patches-releasedhttps://runtimerebel.com/blog/sap-netweaver-commerce-cloud-urgent-critical-patches-releasedSAP addresses 15 vulnerabilities, including four critical flaws in NetWeaver AS Java and Commerce Cloud, requiring immediate patching to prevent remote exploitation.Tue, 09 Jun 2026 20:48:11 GMTSAPNetWeaverCommerce CloudVulnerabilityPatch Managementhttps://runtimerebel.com/blog/sap-netweaver-and-commerce-cve-2024-21733-mitigation-guidehttps://runtimerebel.com/blog/sap-netweaver-and-commerce-cve-2024-21733-mitigation-guideSAP releases January 2024 security updates addressing critical vulnerabilities in BusinessObjects, NetWeaver, and Commerce Cloud. Patch now to prevent RCE.Tue, 09 Jun 2026 13:10:33 GMTSAPCVE-2024-21733NetWeaverBusinessObjectsCommerce Cloudhttps://runtimerebel.com/blog/sap-commerce-cloud-and-s-4hana-critical-vulnerabilities-patch-nowhttps://runtimerebel.com/blog/sap-commerce-cloud-and-s-4hana-critical-vulnerabilities-patch-nowSAP May 2024 updates address critical vulnerabilities in Commerce Cloud and S/4HANA. Learn how to mitigate RCE and SSRF risks to protect enterprise ERP systems.Tue, 12 May 2026 12:49:20 GMTSAPCVE-2024-33003CVE-2024-34688RCES 4HANAhttps://runtimerebel.com/blog/teampcp-targets-sap-npm-packages-mini-shai-hulud-supply-chain-attackhttps://runtimerebel.com/blog/teampcp-targets-sap-npm-packages-mini-shai-hulud-supply-chain-attackTeamPCP broadens supply chain attacks, compromising npm packages in SAP's cloud development ecosystem with the 'Mini Shai-Hulud' malicious code injection.Fri, 01 May 2026 00:54:59 GMTTeamPCPSAPNPMSupply Chain AttackMini Shai HuludCloud Securityhttps://runtimerebel.com/blog/sap-npm-supply-chain-attack-analyzing-the-mini-shai-hulud-campaignhttps://runtimerebel.com/blog/sap-npm-supply-chain-attack-analyzing-the-mini-shai-hulud-campaignSecurity researchers identified a malicious supply chain attack targeting SAP via NPM packages using the Bun runtime to evade traditional EDR detection.Thu, 30 Apr 2026 16:38:51 GMTSAPNPM SecurityMini Shai HuludDependency ConfusionBun RuntimeDevSecOpshttps://runtimerebel.com/blog/official-sap-npm-packages-compromised-in-teampcp-supply-chain-attackhttps://runtimerebel.com/blog/official-sap-npm-packages-compromised-in-teampcp-supply-chain-attackAttackers compromised official SAP npm packages to exfiltrate developer credentials and tokens. Learn how to detect and remediate this supply chain threat.Thu, 30 Apr 2026 00:50:55 GMTSAPNPMTeamPCPCredential TheftMalicious Packageshttps://runtimerebel.com/blog/sap-npm-packages-compromised-by-mini-shai-hulud-malwarehttps://runtimerebel.com/blog/sap-npm-packages-compromised-by-mini-shai-hulud-malwareThe Mini Shai-Hulud campaign targets SAP cloud application developers with credential-stealing npm packages. Learn how to detect and mitigate this threat.Wed, 29 Apr 2026 16:37:44 GMTSAPNPMMini Shai HuludSupply Chain AttackWizCredential Thefthttps://runtimerebel.com/blog/sap-cve-2026-27681-critical-sql-injection-vulnerability-patch-guidancehttps://runtimerebel.com/blog/sap-cve-2026-27681-critical-sql-injection-vulnerability-patch-guidanceApril Patch Tuesday addresses a critical 9.9 CVSS SQL injection vulnerability in SAP Business Warehouse and updates for Microsoft, Adobe, and Fortinet.Wed, 15 Apr 2026 16:28:18 GMTCVE-2026-27681SAPPatch TuesdaySQL InjectionMicrosoftFortinet