Story thread · 4 reports / 1 sources

SAP’s September Patch Day Drops Four Critical CVEs—Three of Them Bypass Authentication Entirely

forkast.news · 6dShare

SAP’s September 2026 Patch Day dropped 19 new security notes on September 8, and four of them carry Critical severity. Three involve the same structural failure: authentication is missing or bypassed before the system checks who is asking. The authentication gap is no longer an open-source middleware story. The two most severe—CVE-2026-44756 and CVE-2026-58240, both […]

First report: The Authentication Gap Is the Real AI Infrastructure Crisis — forkast.news, 8d