Since yesterday stale
Since yesterday
+24 added
−18 removed
CTI status
Joel Traber AG
Last update: · no new data today
Last pipeline run:
Status High
Last 7 days stale
Last 7 days
+24 added
−13 removed
Top threats
Sorted by KEV · Risk · EPSS View all 24 →
Admiralty grading (A–F · 1–6)
Source reliability
- A Completely reliable
- B Usually reliable
- C Fairly reliable
- D Not usually reliable
- E Unreliable
- F Cannot be judged
Information credibility
- 1 Confirmed
- 2 Probably true
- 3 Possibly true
- 4 Doubtful
- 5 Improbable
- 6 Cannot be judged
NATO Admiralty (AJP-2.1) grades confidence, independent of the risk score. Cross-source corroboration isn't tracked for non-CVE news, so single-source items are capped at a lower credibility number; a low number does not imply low quality.
NEW A2
100 CVE-2026-27690: HTTP Request Smuggling Vulnerability in SAP Approuter
The vulnerability allows unauthenticated attackers to expose user responses and cause system unavailability through crafted HTTP requests , a critical risk for SAP-based ERP infrastructure.
Critical
CVSS
9.1
EPSS
0%
NEW A2
100 CVE-2026-44747: SAP NetWeaver Application Server ABAP Memory Corruption Vulnerability
The vulnerability requires authentication and exploits memory management errors, which means lower exploitation risk for ERP systems with restricted network access, but becomes critical if user accounts are compromised.
Critical
CVSS
9.9
EPSS
0%
NEW A2
98 CVE-2026-44745: SAP Approuter OAuth2 Header Validation Vulnerability
The vulnerability enables authentication bypass through manipulated HTTP headers without requiring user interaction , organizations with cloud-based SAP deployments should prioritize reviewing their Approuter configuration.
Critical
CVSS
8.1
EPSS
0%
NEW A2
90 CVE-2026-54429: SIMATIC S7-PLCSIM Advanced Memory Exhaustion via High-Volume Multicast Traffic
The vulnerability affects a simulation environment, not production systems directly; however, it poses a risk to engineering workstations and development workflows in manufacturing operations.
Critical
CVSS
7.4
EPSS
0%
NEW A2
84 CVE-2026-58233
The vulnerability requires authentication and manual processing of a malicious archive file, which limits attack surface in typical production environments but is relevant for SAP administrators and change-management workflows.
Critical
CVSS
7.6
EPSS
0%
Trend
Critical High Other