Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
10 IOCs
SAP July 2026 Patch Day Fixes Critical NetWeaver and AppRouter Flaws
Excerpt
SAP’s July 2026 Security Patch Day, released on 14th July 2026, addressed 16 new security issues, alongside three updates to previously issued notes, with two critical flaws in NetWeaver and AppRouter topping the list. The most severe issue, tracked as CVE-2026-44747 and carrying a maximum CVSS score of 9.9, is a memory corruption vulnerability in SAP NetWeaver Application Server ABAP . According to SAP’s advisory, the flaw allows an attacker to exploit logical…
Read the original report →Attack Flow7 steps · MITRE ATT&CK mapped
Indicators of Compromise
Open the mindmap →10 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-44761 | Medium | Score 54/100 | First seen |
| CVE | CVE-2025-68161 | Medium | Score 53/100 | First seen |
| CVE | CVE-2026-40860 | Medium | Score 54/100 | First seen |
| CVE | CVE-2026-58233 | Medium | Score 54/100 | First seen |
| CVE | CVE-2026-0487 | Medium | Score 54/100 | First seen |
| CVE | CVE-2026-44767 | Medium | Score 51/100 | First seen |
| CVE | CVE-2026-40128 | Medium | Score 56/100 | First seen |
| CVE | CVE-2026-44747 | Medium | Score 54/100 | First seen |
| CVE | CVE-2026-24315 | Medium | Score 51/100 | First seen |
| CVE | CVE-2026-27690 | Medium | Score 54/100 | First seen |
IOC Relationship Graph
Building graph…