Follow the latest coverage, related explainers and connected technology stories.
SAP fixed 20 vulnerabilities in its September 2026 security updates, including a critical-severity vulnerability in SAP Kernel that could allow unauthenticated attackers to execute commands with administrative privileges. Researchers estimate that more than 10,000 SAP systems exposed to the internet could be affected.