SAP released fixes for 15 security flaws in its June 2026 patch package, with four critical-severity vulnerabilities affecting NetWeaver and Commerce Cloud platforms.
SAP addressed the vulnerabilities through its monthly security update, prioritizing threats to two widely-used enterprise systems. NetWeaver and Commerce Cloud, which support critical business operations across numerous organizations, were the primary targets of the critical flaws.
The four critical-severity issues pose significant risk to affected deployments. Critical vulnerabilities in enterprise software can enable unauthorized access, data breaches, or system compromise if exploited. Organizations running these platforms should prioritize applying the patches.
The remaining 11 vulnerabilities in the patch package carry lower severity ratings. SAP's phased approach to security releases allows the company to address multiple threats across its product portfolio simultaneously.
NetWeaver serves as the foundation for many SAP applications, including ERP and CRM systems used by enterprises globally. Commerce Cloud supports e-commerce operations for retail and manufacturing organizations. Both platforms process sensitive business and customer data, making security updates critical.
SAP recommends customers review the security advisory for detailed information about each vulnerability, including affected versions and mitigation steps. Organizations should test patches in non-production environments before deploying to live systems.
The company typically releases security patches on the second Tuesday of each month. This structured schedule helps organizations plan maintenance windows and allocate resources for patch management.
Regular patching remains essential for maintaining enterprise security posture. Unpatched systems present ongoing risk from both known and emerging threats. Organizations should establish processes to deploy critical and high-severity patches promptly while managing operational requirements.
Security researchers have identified RatHat, a new Android malware that leverages AI to automate remote device control. The threat targets Android users through an AI-powered subsystem that enables operators to navigate compromised devices with minimal manual intervention.
CrowdSec, a cybersecurity platform focused on threat intelligence and DDoS protection, confirmed unauthorized access to its source code repository. The company disclosed the incident and outlined remediation steps.
Brevo confirmed attackers stole a Cloudflare API key and injected malicious ClickFix scripts into its websites and customer JavaScript files. The compromise enabled malware distribution across multiple sites.
Artificial intelligence is accelerating identity attacks by making credential theft faster and easier to weaponize. Security experts warn that traditional authentication alone no longer provides adequate protection.