SAP OVERPASS: A CVSS-10 Kernel Flaw Owns Your SAP System Before the First Auth Check
A CVSS 10 hole in the SAP kernel lets an unauthenticated attacker own the system before the first authorization check ever runs. Patch Tuesday just moved from IT chore to board-level emergency. SAP’s September security patch day landed on Tuesday (Sept 8) with 20 new and updated notes. One of them, CVE-2026-44756, carries the maximum…