SAP patches ICM2SHELL and PROXYGATE maximum severity flaws

First reported by The Hacker News at · Updated · 4 sources

SAP patched 35 vulnerabilities in its November 2026 security updates, including four maximum-severity issues affecting its NetWeaver, Web Dispatcher, and Gateway software.

Covered by 4 publishers within 5 hours of the first report.

Summary from BleepingComputer.

Reporting4

The Hacker News SAP Patches Four CVSS 10.0 Flaws, Including Two Enabling Remote Code Execution · info@thehackernews.com (The Hacker News)
Cyber Security News SAP Security Patch Day – Critical SAP NetWeaver, Dispatcher and Gateway Vulnerabilities Patched · Abinaya
BleepingComputer SAP patches ICM2SHELL and PROXYGATE maximum severity flaws · Sergiu Gatlan
SecurityWeek SAP Patches Critical ICM2SHELL, ProxyGate Vulnerabilities · Ionut Arghire