CVE-2026-58240

SAP Security Patch Day Addresses Critical NetWeaver Message Server Authentication Bypass

SAP released security updates for CVE-2026-58240, a CVSS 9.6 authentication bypass in NetWeaver AS Java/ABAP Message Server that permits enterprise takeover.