Onapsis

SAP OVERPASS: CVSS 10.0 Kernel Flaw Enables Pre-Auth Remote Code Execution

SAP and Onapsis disclosed OVERPASS (CVE-2026-44756), a maximum-severity kernel flaw in Extended Passport processing enabling unauthenticated root RCE on enterprise ERP hosts.