SAP Patches Critical Vulnerabilities in NetWeaver, Commerce Cloud, AppRouter

SAP addressed 16 vulnerabilities in its July 2026 security updates, including three critical flaws affecting NetWeaver, Commerce Cloud, and AppRouter. The critical issues could allow attackers to access and modify data, and cause system unavailability through request-response desynchronization. SAP NetWeaver and Commerce Cloud are widely deployed in large enterprise environments, making unpatched instances high-value targets. Organizations running affected SAP products should prioritize applying July’s security updates, particularly for internet-facing NetWeaver and Commerce Cloud instances.