SAP PATCHES CRITICAL FLAWS IN COMMERCE CLOUD, S/4HANA

INDUSTRY DESK■ 1 MIN READ

TUE, MAY 12, 2026

■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE

SAP released its May 2026 security updates, addressing 15 vulnerabilities across multiple products. Two critical flaws affect the Commerce Cloud e-commerce platform and S/4HANA ERP suite.

The May 2026 security patch addresses vulnerabilities spanning SAP's enterprise software portfolio. The two critical flaws require immediate attention from organizations running Commerce Cloud and S/4HANA in production environments. Commerce Cloud, SAP's enterprise-grade e-commerce platform, and S/4HANA, the company's core ERP solution, represent critical infrastructure for many large organizations. Vulnerabilities in these systems can expose sensitive business data and operational processes. SAP recommends customers apply the security updates immediately. Organizations should prioritize patching systems connected to external networks or handling sensitive transaction data. The full advisory includes details on severity levels, affected versions, and remediation steps. Customers can access patch availability through SAP's support portal. Security teams should review their deployment configurations to identify exposed instances requiring urgent updates.

■ SOURCES

► Bleeping Computer

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

P696ANTHROPIC FORCES CLAUDE LOGOUTS AFTER MALWARE HIJACKS SESSIONS

Anthropic has signed out some Claude users and removed saved payment methods after infostealer malware on their computers hijacked active sessions to drain API usage credits. The company is issuing refunds for unauthorized charges.

1H AGO— AI Desk

P694DRIVERLESS CARS POSE CYBERSECURITY THREATS, EXPERT WARNS

Former NYC Traffic Commissioner Sam Schwartz warns that autonomous vehicle expansion creates significant cybersecurity risks, including the potential for bad actors to seize control of connected cars and weaponize them.

1H AGO— Security Desk

P689METR AND REDWOOD RELEASE HUGGINGFACE HACK ANALYSIS

Security research firms METR and Redwood have published a detailed postmortem examining the HuggingFace security incident. The analysis provides technical insights into how the breach occurred and what systems were compromised.

6H AGO— Security Desk

P68812TB OF STEAM FILES LEAKED IN DECADE-LONG BREACH

More than a decade of Steam files, including beta builds and finished games from Valve and third-party developers, have been exposed in a major data leak totaling over 12 terabytes.

6H AGO— Industry Desk

◄ BACK TO NEWS

SAP PATCHES CRITICAL FLAWS IN COMMERCE CLOUD, S/4HANA

■ MORE FROM THE SECURITY DESK

■ SUBSCRIBE TO THE DAILY BRIEF