The Circuitry
THE CIRCUITRYYour one-stop source for all tech news
HOMETODAYNEWSFEEDEVENTS
BOOKMARKS
RSS
© 2026 The Circuitry
About UsSourcesContactCorrectionsPrivacy
  • Today
  • Feed
  • Events
  • Saved
  • AAPL
  • MSFT
  • GOOGL
  • META
  • NVDA
  • TSLA
  • AMZN
  • INTC
  • SONY
  • TTWO
  • COIN
  • BTC
  • ETH
  • SOL
  • AAPL
  • MSFT
  • GOOGL
  • META
  • NVDA
  • TSLA
  • AMZN
  • INTC
  • SONY
  • TTWO
  • COIN
  • BTC
  • ETH
  • SOL

Feed

Ad
From The CircuitryVerified tech news, cross-checked.How we verify →
  • Ring lists a $249.99 indoor drone cam and a $999.99 robotTech
  • Reuters calculates Anthropic at up to $1.4 trillion fully dilutedTech
  • Anthropic launches a roadshow for a proposed IPO at $70 to $78Tech
  • Sawyer Merritt reports Tesla stopped Premium Cybertruck ordersTech
  • NVD publishes unauthenticated SAP flaws, with no base scores yetSecurity
  • Nvidia and CEO Huang sued in a proposed securities class actionTech
  • Google launches a Knowledge Work layout in AntigravityTech
Scroll for more
Verification
VERIFIEDConfidence: HIGH
Source identified
Claims cross-referenced
No discrepancies found
Sourcing
1source

via SAP

Ad
From The CircuitryWhy The Circuitry

Verified tech news, cross-checked.

Every story is checked against independent sources before it posts — no rumors dressed up as fact.

How we verify →
From The CircuitryWhy The Circuitry

Verified tech news, cross-checked.

Every story is checked against independent sources before it posts — no rumors dressed up as fact.

How we verify →
Home/Tech/SAP releases 35 new security notes, including four scored 10.0
VERIFIEDBy Xavier Rivera·Tuesday, November 10, 2026 at 8:50 AM AST·1.5 min read

SAP releases 35 new security notes, including four scored 10.0

SAP released 35 new security notes on November 10, including four scored 10.0.

Source:SAP
Post
SAP releases 35 new security notes, including four scored 10.0
Ad
From The CircuitryVerified tech news, cross-checked.How we verify →
Ad
From The CircuitryWhy The Circuitry

Verified tech news, cross-checked.

Every story is checked against independent sources before it posts — no rumors dressed up as fact.

How we verify →
TL;DRAI · 60 sec read

SAP released 35 new security notes on November 10, plus 4 GitHub advisories and 3 updates to older notes. Four notes are scored 10.0, covering NetWeaver, Web Dispatcher, Gateway, and a SAML2 service.

SAP released 35 new security notes on November 10, plus 4 GitHub security advisories and 3 updates to notes it had already published.
Note 3778530 covers CVE-2026-76964, a memory corruption flaw in the Internet Communication Manager of SAP NetWeaver AS ABAP.
Four notes are scored 10.0. Note 3778530 covers CVE-2026-76964, a memory corruption flaw in the Internet Communication Manager of SAP NetWeaver AS ABAP. The listed builds include kernel line 7.53 and later kernel builds through 9.20. Note 3778556 covers CVE-2026-89126, a memory corruption flaw in SAP Web Dispatcher, also scored 10.0. Note 3798345 covers CVE-2026-89103, a broken access control flaw in SAP Gateway, scored 10.0. Note 3849308 covers CVE-2026-120017, a missing-authentication flaw in the SAML2 service provider, scored 10.0.
From The CircuitryThe Feed — live briefs across tech, all day.See what’s happening →
SAP marks more notes Critical below that score. CVE-2026-109803, a code injection flaw in Knowledge Management XML Forms, is scored 9.9. CVE-2026-76965, an OS command injection flaw in the ABAP application server, is scored 9.9. CVE-2026-109795, a missing authorization check in S4CRM, is scored 9.9. CVE-2026-89119, a cross-site request forgery flaw in Web Dispatcher and the Internet Communication Manager, is scored 9.6. That note also lists CVE-2026-120014.
The patch-day page says customers should visit the support portal and apply the patches on priority.
The SAML2 note covers a long basis list. SAP lists SAP_BASIS 702, 731, 740, releases from 750 through 758, plus 816 and 920 through 922. The Gateway note lists kernel builds from 7.22, including 7.22EXT, through 9.21. The Web Dispatcher note lists HDB 2.00, WEBDISP builds from 7.53 through 9.16, kernel builds through 9.20, XS_ADVANCED_RUNTIME 1.00, and SAP_EXTENDED_APP_SERVICES 1.
Ad
From The CircuitryWhy The Circuitry

Verified tech news, cross-checked.

Every story is checked against independent sources before it posts — no rumors dressed up as fact.

How we verify →
SAP tells customers to patch first. The patch-day page says customers should visit the support portal and apply the patches on priority. The scores on the page are SAP's.
Why this mattersAI · ~100 words

Tap a lens to see what this story means for you.

Morning Brief

Liked this? The Brief brings you the whole day in tech, verified, every morning.

Two minutes, free forever. What's in The Brief →

Reader-supported
DonateBuy me a coffee →Follow@thecircuitry_ →Follow@thecircuitry.to →
HELP US IMPROVE
From The Circuitry

See what’s happening right now

The Feed runs all day — short, verified briefs the moment they break.

Open the Feed →
From The Circuitry

Follow @thecircuitry_

Every story we publish, as it happens. No noise between.

Follow on X ↗On Bluesky ↗

Reader-supported

The Circuitry is a passion project I've always wanted to build, and I love the work behind it.

Running it costs real money. APIs, hosting, time. To keep improving the site and growing this into something useful for everyone, those costs have to be covered.

Any contribution is appreciated. If not, no pressure. Thanks for reading.

Buy me a coffee
More inTech
  • Nvidia and CEO Huang sued in a proposed securities class action

    Tech · 13h
  • Google launches a Knowledge Work layout in Antigravity

    Tech · 13h
SupportThe Work

The Circuitry is reader-supported. If you find the daily brief useful, you can buy me a coffee to keep it going.

Buy a coffee →
Ad
From The CircuitryWhy The Circuitry

Verified tech news, cross-checked.

Every story is checked against independent sources before it posts — no rumors dressed up as fact.

How we verify →
From The CircuitryWhy The Circuitry

Verified tech news, cross-checked.

Every story is checked against independent sources before it posts — no rumors dressed up as fact.

How we verify →

MORE IN THIS BEAT

All Tech →
  • Tech·Nov 10

    Ring lists a $249.99 indoor drone cam and a $999.99 robot

    Ring has listed Ring Drone Cam at $249.99 and Ring Rover Cam at $999.99, and says the drone still needs Federal Communications Commission authorization.

  • Tech·Nov 10

    Reuters calculates Anthropic at up to $1.4 trillion fully diluted

    Reuters calculates that Anthropic's proposed share range would value the company at up to $1.4 trillion on a fully diluted basis, or about $1 trillion on a non-diluted basis.

  • Tech·Nov 10

    Anthropic launches a roadshow for a proposed IPO at $70 to $78

    Anthropic has launched the roadshow for a proposed IPO of Class A shares, expected at $70.00 to $78.00, and applied to list on Nasdaq as ANT.

  • Tech·Nov 9

    Sawyer Merritt reports Tesla stopped Premium Cybertruck orders

    Sawyer Merritt reports Tesla has stopped Cybertruck Premium All-Wheel Drive orders. The configurator lists Dual Motor at $82,490, and that row cannot be selected.

  • Tech·Nov 9

    NVD publishes unauthenticated SAP flaws, with no base scores yet

    NVD published SAP-sourced entries on November 10 for flaws an unauthenticated attacker could reach over the network.