SAP has patched three critical vulnerabilities, grouped as PROXYGATE and ICM2SHELL, that let attackers take control of affected SAP systems without authentication. Discovered by Onapsis Research Labs and disclosed on November 10, 2026, all three carry CVSS scores of 10.0. The fixes arrived during November’s security updates. Successful exploitation runs operating system commands as <sid>adm, […]
This article has been indexed from GBHackers Security | #1 Globally Trusted Cyber Security News Platform
Read the original article:
Critical SAP PROXYGATE and ICM2SHELL Vulnerabilities Allow Server Takeover Without Authentication