SAP patches ICM2SHELL and PROXYGATE flaws that allow remote system takeover

SAP has patched four maximum-severity vulnerabilities, including flaws dubbed ICM2SHELL and PROXYGATE, in its November 2026 security updates. They affect NetWeaver, the application platform behind SAP business software, as well as Web Dispatcher and Gateway, which route requests and connect external applications to SAP systems. Attackers can exploit the flaws remotely without credentials to compromise affected systems. Source

Läs hela artikeln hos källan.