SAP PATCHES CRITICAL FLAWS IN COMMERCE CLOUD, S/4HANA

INDUSTRY DESK■ 1 MIN READ

TUE, MAY 12, 2026

■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE

SAP released its May 2026 security updates, addressing 15 vulnerabilities across multiple products. Two critical flaws affect the Commerce Cloud e-commerce platform and S/4HANA ERP suite.

The May 2026 security patch addresses vulnerabilities spanning SAP's enterprise software portfolio. The two critical flaws require immediate attention from organizations running Commerce Cloud and S/4HANA in production environments. Commerce Cloud, SAP's enterprise-grade e-commerce platform, and S/4HANA, the company's core ERP solution, represent critical infrastructure for many large organizations. Vulnerabilities in these systems can expose sensitive business data and operational processes. SAP recommends customers apply the security updates immediately. Organizations should prioritize patching systems connected to external networks or handling sensitive transaction data. The full advisory includes details on severity levels, affected versions, and remediation steps. Customers can access patch availability through SAP's support portal. Security teams should review their deployment configurations to identify exposed instances requiring urgent updates.

■ SOURCES

► Bleeping Computer

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

P726BERLIN CONFIRMS DATA THEFT IN RHYSIDA RANSOMWARE ATTACK

Berlin's city administration has confirmed that the Rhysida ransomware gang stole data and is attempting extortion after listing the city on their data leak site.

JUST NOW— AI Desk

P711ATM VULNERABILITIES EXPOSE SOFTWARE SUPPLY CHAIN RISKS

A security researcher discovered nine vulnerabilities in ATM encryption and authentication software. The findings highlight systemic weaknesses affecting critical infrastructure beyond banking.

3H AGO— AI Desk

P696ANTHROPIC FORCES CLAUDE LOGOUTS AFTER MALWARE HIJACKS SESSIONS

Anthropic has signed out some Claude users and removed saved payment methods after infostealer malware on their computers hijacked active sessions to drain API usage credits. The company is issuing refunds for unauthorized charges.

13H AGO— AI Desk

P694DRIVERLESS CARS POSE CYBERSECURITY THREATS, EXPERT WARNS

Former NYC Traffic Commissioner Sam Schwartz warns that autonomous vehicle expansion creates significant cybersecurity risks, including the potential for bad actors to seize control of connected cars and weaponize them.

14H AGO— Security Desk

◄ BACK TO NEWS

SAP PATCHES CRITICAL FLAWS IN COMMERCE CLOUD, S/4HANA

■ MORE FROM THE SECURITY DESK

■ SUBSCRIBE TO THE DAILY BRIEF