SAP Patchday April 2026: 13 Kritische Schwachstellen, CVSS 9.9

CERT-Bund disclosed 13 critical vulnerabilities in SAP Software with a CVSS Base Score of 9.9, affecting enterprise systems running on Linux, UNIX, Windows, and other platforms. The vulnerabilities enable multiple attack vectors including SQL injection, privilege escalation, arbitrary code execution, security bypass, cross-site scripting, data manipulation, and information disclosure. Organizations running SAP software should prioritize applying the April 2026 SAP Patchday updates immediately to mitigate remote attack risks.

Affected parties including government agencies and commercial enterprises using SAP solutions must assess their installations for vulnerable components and deploy available patches without delay. The critical severity rating (CVSS 9.9) and confirmed remote attack capability indicate urgent remediation is required to prevent potential system compromise, data breach, or unauthorized access to enterprise resources.