Serial number: AV26-1030
Date: October 13, 2026
As of October 13, 2026, SAP_SE is affected by vulnerabilities in the following products:
- SAP Cloud SDK
- Prior to 0.45.2
- SAP Commerce Cloud (OOTB Code)
- Version COM_CLOUD 2211-JDK21
- SAP Manufacturing Integration and Intelligence (Configuration Service)
- Version 15.5
- Version XMII 15.4
- SAP NetWeaver Visual Composer
- Version VC70RUNTIME 7.50
- SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager)
- Versions HDB 2.00, KRNL64UC 7.53, WEBDISP 7.53, 7.54, 7.77, 7.93, 9.16, XS_ADVANCED_RUNTIME 1.00, SAP_EXTENDED_APP_SERVICES 1, CONTSERV 7.53, 7.54, KERNEL 7.53, 7.54, 7.77, 7.93, 9.16, 9.18, 9.19 and 9.20
- SAP S/4HANA (Manage Substitution/Validation Rules)
- Versions S4CORE 105, 106, 107, 108, 109
The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.