SAP patches ICM2SHELL and PROXYGATE maximum severity flaws

November 10, 2026 · 10:02 am 3 sources

Image: BleepingComputer

Coverage

Coverage

• SAP patches ICM2SHELL and PROXYGATE maximum severity flaws
  BleepingComputer · November 10, 2026 12:07
  SAP patched 35 vulnerabilities in its November 2026 security updates, including four maximum-severity issues affecting its NetWeaver, Web Dispatcher, and Gateway software. [...]
• SAP Patches Critical ICM2SHELL, ProxyGate Vulnerabilities
  SecurityWeek · November 10, 2026 14:46
  SAP has published 42 new and updated security advisories, including nine that address critical-severity vulnerabilities. The post SAP Patches Critical ICM2SHELL, ProxyGate Vulnerabilities appeared first on SecurityWeek .

More coverage

• SAP Patches Four CVSS 10.0 Flaws, Including Two Enabling Remote Code Execution
  The Hacker News · November 10, 2026 10:02
  Four flaws that attackers could exploit without logging in were fixed today as part of SAP's monthly Security Patch Day—the vendor rates all four 10.0, the maximum CVSS score. Three are in the SAP NetWeaver application server, the software SAP systems run on, and one is in the Web Dispatcher,…