{"vulnerability": "cve-2026-44748", "sightings": [{"uuid": "ff727bb9-8051-462d-8118-1a3659954bfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-44748", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116717559819877272", "content": "\ud83d\udea8 CRITICAL: CVE-2026-44748 hits SAP NetWeaver AS ABAP & ABAP Platform (SAP_BASIS 702 \u2013 919). Improper cryptographic signature checks may let attackers gain unauthorized access! Patch urgently. https://radar.offseq.com/threat/cve-2026-44748-cwe-347-improper-verification-of-cr-3c43c9f0 #OffSeq #SAP #Vuln #InfoSec", "creation_timestamp": "2026-06-09T01:30:28.035502Z"}, {"uuid": "878d41c7-154d-49dc-a03a-9d4778861474", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mntaren2hl25", "content": "CVE-2026-44748 - XML Signature Wrapping in SAML Authentication in SAP NetWeaver AS ABAP and ABAP Platform\nCVE ID : CVE-2026-44748\n \n Published : June 9, 2026, 1:16 a.m. | 1\u00a0hour, 58\u00a0minutes ago\n \n Description : SAP NetWeaver Application Server ABAP and ABAP Platform allows an ...", "creation_timestamp": "2026-06-09T03:25:44.977506Z"}, {"uuid": "2d748815-03b1-48a6-b151-2f412a14ad65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://www.acn.gov.it/portale/w/sap-security-patch-day-17", "content": "", "creation_timestamp": "2026-06-09T01:20:31.000000Z"}, {"uuid": "ac511560-4915-4ebb-80c1-439259599346", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnu76qz3un2z", "content": "\ud83d\udd17 CVE : CVE-2025-68161, CVE-2026-22732, CVE-2026-24315, CVE-2026-27671, CVE-2026-29145, CVE-2026-40128, CVE-2026-44743, CVE-2026-44744, CVE-2026-44746, CVE-2026-44748, CVE-2026-44750, CVE-2026-44751, CVE-2026-44754, CVE-2026-44755, CVE-2026-44757", "creation_timestamp": "2026-06-09T12:30:10.021016Z"}, {"uuid": "757681cb-2677-4f16-964c-76ec09f5b6ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnuh5n6vh32y", "content": "3/ \u26a0\ufe0f SAP Patch Tuesday: CVE-2026-44748 (CVSS 9.9) \u2014 XML tampering lets attackers hijack enterprise identity across SAP systems. CVE-2026-27671 (CVSS 9.8) \u2014 unauthenticated memory corruption. Patch both NOW.", "creation_timestamp": "2026-06-09T14:52:55.234944Z"}, {"uuid": "1f175da8-4f78-41e4-a55a-bec05d5d2023", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnuh5n6lol2y", "content": "3/ \u26a0\ufe0f SAP Patch Tuesday: CVE-2026-44748 (CVSS 9.9) \u2014 XML tampering lets attackers hijack enterprise identity across SAP systems. CVE-2026-27671 (CVSS 9.8) \u2014 unauthenticated memory corruption. Patch both NOW.", "creation_timestamp": "2026-06-09T14:52:38.841781Z"}, {"uuid": "8a56dea8-e231-4bad-bb67-70b66ef0e1ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnuh5n6sjd2y", "content": "3/ \u26a0\ufe0f SAP Patch Tuesday: CVE-2026-44748 (CVSS 9.9) \u2014 XML tampering lets attackers hijack enterprise identity across SAP systems. CVE-2026-27671 (CVSS 9.8) \u2014 unauthenticated memory corruption. Patch both NOW.", "creation_timestamp": "2026-06-09T14:52:40.146256Z"}, {"uuid": "5aebd20b-ef09-4a9d-bb78-5cab2cb79ff4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnuh5n6til2y", "content": "3/ \u26a0\ufe0f SAP Patch Tuesday: CVE-2026-44748 (CVSS 9.9) \u2014 XML tampering lets attackers hijack enterprise identity across SAP systems. CVE-2026-27671 (CVSS 9.8) \u2014 unauthenticated memory corruption. Patch both NOW.", "creation_timestamp": "2026-06-09T14:52:41.482608Z"}, {"uuid": "cafea526-4ca4-4934-9c6e-5bdba5a2bda7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnuh5n6uht2y", "content": "3/ \u26a0\ufe0f SAP Patch Tuesday: CVE-2026-44748 (CVSS 9.9) \u2014 XML tampering lets attackers hijack enterprise identity across SAP systems. CVE-2026-27671 (CVSS 9.8) \u2014 unauthenticated memory corruption. Patch both NOW.", "creation_timestamp": "2026-06-09T14:52:51.824264Z"}, {"uuid": "360e4f17-0b8c-44dc-ac7e-34c62e6253ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnuh5n6wgd2y", "content": "3/ \u26a0\ufe0f SAP Patch Tuesday: CVE-2026-44748 (CVSS 9.9) \u2014 XML tampering lets attackers hijack enterprise identity across SAP systems. CVE-2026-27671 (CVSS 9.8) \u2014 unauthenticated memory corruption. Patch both NOW.", "creation_timestamp": "2026-06-09T14:52:57.052037Z"}, {"uuid": "8e6a078f-0fcd-41e7-b826-9ee2ccfa6b70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnuh5n6xfl2y", "content": "3/ \u26a0\ufe0f SAP Patch Tuesday: CVE-2026-44748 (CVSS 9.9) \u2014 XML tampering lets attackers hijack enterprise identity across SAP systems. CVE-2026-27671 (CVSS 9.8) \u2014 unauthenticated memory corruption. Patch both NOW.", "creation_timestamp": "2026-06-09T14:52:58.410789Z"}, {"uuid": "edaa0fb1-d023-4518-8141-f42ddd2c6169", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnuh5n6xfm2y", "content": "3/ \u26a0\ufe0f SAP Patch Tuesday: CVE-2026-44748 (CVSS 9.9) \u2014 XML tampering lets attackers hijack enterprise identity across SAP systems. CVE-2026-27671 (CVSS 9.8) \u2014 unauthenticated memory corruption. Patch both NOW.", "creation_timestamp": "2026-06-09T14:52:59.941845Z"}, {"uuid": "57e25469-b000-4ef2-baec-f2f246c101cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnuh5n6yeu2y", "content": "3/ \u26a0\ufe0f SAP Patch Tuesday: CVE-2026-44748 (CVSS 9.9) \u2014 XML tampering lets attackers hijack enterprise identity across SAP systems. CVE-2026-27671 (CVSS 9.8) \u2014 unauthenticated memory corruption. Patch both NOW.", "creation_timestamp": "2026-06-09T14:53:01.229709Z"}, {"uuid": "1900c68e-a896-49ea-a8b6-4ec47ffc4a59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mnuhl5u5352d", "content": "SAP released 15 June 2026 security notes, including 4 critical fixes for NetWeaver, Commerce Cloud, and Data Hub. CVE-2026-44748 in NetWeaver AS ABAP scores 9.9 and impacts XML Signature Wrapping. #SAP #NetWeaver #CommerceCloud", "creation_timestamp": "2026-06-09T15:00:12.345726Z"}, {"uuid": "37fd7344-b067-4c76-86e9-b41a20f810f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mnv67dcpyh2j", "content": "SAP's June 2026 patch fixes 15 flaws, including 4 critical issues in NetWeaver and Commerce Cloud. CVE-2026-44748 and CVE-2026-27671 may enable auth bypass, memory corruption, and directory traversal. #SAP #NetWeaver #CommerceCloud", "creation_timestamp": "2026-06-09T21:45:12.155189Z"}, {"uuid": "9c679a9e-3242-44b9-8131-d78a0a381df6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://www.cert.se/2026/06/patchtisdag-juni-2026-samlad-information-om-manadens-sakerhetsuppdateringar.html", "content": "", "creation_timestamp": "2026-06-10T05:00:00.000000Z"}, {"uuid": "ba4fe40b-0d52-4246-9ade-d745d1207b82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motnj6kkp32f", "content": "\ud83d\udea8  ALERT: CVE-2026-44748\n\nCVSS 9.9/10\n\n\ud83d\udccb WHAT IT IS:\nSAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated attacker with normal privileges to obtain a valid signed message and send modified signed XML documents to the verifier. This may result in acceptance of tampered iden", "creation_timestamp": "2026-06-22T00:39:00.224804Z"}, {"uuid": "5c394e04-ea08-439e-98ba-3927875f5b86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mpu7rw5fsk2l", "content": "SAP\u304cNetWeaver\u304a\u3088\u3073Commerce\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u30d1\u30c3\u30c1\u3092\u9069\u7528\n\n\u89e3\u6c7a\u3055\u308c\u305f\u30d0\u30b0\u306e\u4e2d\u3067\u6700\u3082\u6df1\u523b\u306a\u306e\u306f\u3001CVE-2026-44748\uff08CVSS\u30b9\u30b3\u30a29.9\uff09\u3067\u3001NetWeaver AS ABAP\u304a\u3088\u3073ABAP\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u306eSAML\u8a8d\u8a3c\u306b\u304a\u3051\u308bXML\u7f72\u540d\u30e9\u30c3\u30d4\u30f3\u30b0\u306e\u554f\u984c\u3068\u3057\u3066\u8aac\u660e\u3055\u308c\u3066\u3044\u307e\u3059\u3002\n\n\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4f01\u696d\u306eOnapsis\u306f\u3001\u300c\u901a\u5e38\u306e\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u653b\u6483\u8005\u306f\u3001\u6709\u52b9\u306a\u7f72\u540d\u4ed8\u304d\u30e1\u30c3\u30bb\u30fc\u30b8\u3092\u53d6\u5f97\u3057\u3001\u6539\u3056\u3093\u3055\u308c\u305fID\u60c5\u5831\u3092\u542b\u3080\u5909\u66f4\u3055\u308c\u305f\u7f72\u540d\u4ed8\u304dXML\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u3092\u691c\u8a3c\u8005\u306b\u9001\u4fe1\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u300d\u3068\u8aac\u660e\u3057\u3066\u3044\u307e\u3059\u3002", "creation_timestamp": "2026-07-04T23:31:14.786792Z"}, {"uuid": "65a6f5f6-9929-43d3-9cc1-f90cfd4cd633", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mpuegonctc2l", "content": "SAP\u3001\u6708\u4f8b\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b - \u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u300d\u304c4\u4ef6\n\nSAP\u306f\u73fe\u5730\u6642\u95932026\u5e746\u67089\u65e5\u3001\u3042\u3089\u305f\u306b15\u4ef6\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u305f\u3002\u6df1\u523b\u306a\u8106\u5f31\u6027\u3082\u542b\u307e\u308c\u308b\u3002\n\n...\n\n\u300cCVE-2026-44748\u300d\u306f\u3001\u300cSAP NetWeaver AS ABAP\u300d\u300c\u540cABAP Platform\u300d\u306b\u304a\u3044\u3066\u3001SAML\u8a8d\u8a3c\u306b\u304a\u3051\u308bXML\u7f72\u540d\u30e9\u30c3\u30d4\u30f3\u30b0\u306e\u8106\u5f31\u6027\u3002\u307e\u305f\u4e21\u88fd\u54c1\u306e\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30b5\u30fc\u30d0\u306b\u304a\u3044\u3066\u3001\u30e1\u30e2\u30ea\u7834\u58ca\u306e\u8106\u5f31\u6027\u300cCVE-2026-27671\u300d\u304c\u5224\u660e\u3057\u3066\u3044\u308b\u3002", "creation_timestamp": "2026-07-05T00:54:24.202850Z"}, {"uuid": "97063548-6a06-4f41-9028-af1c29601587", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://www.acn.gov.it/portale/w/operational-summary-giugno-2026", "content": "", "creation_timestamp": "2026-07-24T12:45:51.125958Z"}]}