{"id":16857,"date":"2026-11-10T09:00:00","date_gmt":"2026-11-10T08:00:00","guid":{"rendered":"https:\/\/safewave.ai\/sap-patches-four-cvss-10-0-flaws-icm-web-dispatcher-gateway-and-saml2-in-netweaver-vulnerable-to-unauthenticated-takeover\/"},"modified":"2026-11-12T02:01:18","modified_gmt":"2026-11-12T01:01:18","slug":"sap-patches-four-cvss-10-0-flaws-icm-web-dispatcher-gateway-and-saml2-in-netweaver-vulnerable-to-unauthenticated-takeover","status":"publish","type":"post","link":"https:\/\/safewave.ai\/en\/sap-patches-four-cvss-10-0-flaws-icm-web-dispatcher-gateway-and-saml2-in-netweaver-vulnerable-to-unauthenticated-takeover\/","title":{"rendered":"SAP patches four CVSS 10.0 flaws: ICM, Web Dispatcher, Gateway, and SAML2 in NetWeaver vulnerable to unauthenticated takeover"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"16857\" class=\"elementor elementor-16857 elementor-16823\" data-elementor-post-type=\"post\">\n\t\t\t\t<header class=\"elementor-element elementor-element-69a6236 e-flex e-con-boxed e-con e-parent\" data-id=\"69a6236\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-69a7cac elementor-widget elementor-widget-heading\" data-id=\"69a7cac\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<p class=\"elementor-heading-title elementor-size-default\"><a href=\"https:\/\/safewave.ai\/en\/applications-api-and-cloud\/\">Applications, API, and Cloud<\/a><\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-69a7f76 elementor-widget elementor-widget-heading\" data-id=\"69a7f76\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">SAP patches four CVSS 10.0 flaws: ICM, Web Dispatcher, Gateway, and SAML2 in NetWeaver vulnerable to unauthenticated takeover<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-69a72db elementor-widget elementor-widget-text-editor\" data-id=\"69a72db\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>On November 10, 2026, SAP released 35 new security notes, four GitHub bulletins, and three updates to prior notes as part of Security Patch Day. Four vulnerabilities received the maximum CVSS score of 10.0. They affect perimeter-facing components through which SAP systems communicate with the outside world.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-69a7f83 elementor-widget elementor-widget-html\" data-id=\"69a7f83\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<ul class=\"sw-meta\"><li><span>Source<\/span><a href=\"https:\/\/support.sap.com\/en\/my-support\/knowledge-base\/security-notes-news\/november-2026.html\" target=\"_blank\" rel=\"noopener\">SAP<\/a><\/li><li><span>Source publication<\/span>November 10, 2026<\/li><li><span>Type<\/span>Threats and incidents<\/li><\/ul>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/header>\n\t\t<article class=\"elementor-element elementor-element-69a7768 e-flex e-con-boxed e-con e-parent\" data-id=\"69a7768\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-69a7465 elementor-widget elementor-widget-text-editor\" data-id=\"69a7465\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>What happened<\/h2><p>Four 10.0-rated notes cover the communications and authentication layers. Two involve memory corruption: CVE-2026-76964 in the Internet Communication Manager (ICM) of SAP NetWeaver AS ABAP, and CVE-2026-89126 in SAP Web Dispatcher. The third, CVE-2026-89103, is an access control flaw in SAP Gateway. According to NVD descriptions, the default access control list grants overly broad privileges, allowing an external attacker to be treated as an internal application server.<\/p><p>The fourth, CVE-2026-120017, impacts the SAML2 Service Provider in NetWeaver AS ABAP and ABAP Platform. NVD notes that under specific configurations, the system insufficiently validates incoming authentication assertions. An unauthenticated attacker can then bypass authentication and impersonate any user, including privileged accounts.<\/p><p>The CVSS vectors for all four flaws indicate network-based attacks requiring no privileges and no user interaction. Onapsis, cited by Infosecurity Magazine, observed that the patch volume was double the 2026 average. As of November 10, none of the four vulnerabilities had been added to CISA&#8217;s Known Exploited Vulnerabilities (KEV) catalog.<\/p><h2>Key findings<\/h2><ul><li>Note 3778530, CVE-2026-76964: Memory corruption in ICM; SAP lists kernel versions 7.53 through 9.20.<\/li><li>Note 3778556, CVE-2026-89126: Memory corruption in SAP Web Dispatcher.<\/li><li>Note 3798345, CVE-2026-89103: Access control flaw in SAP Gateway, dubbed ProxyGate in the media.<\/li><li>Note 3849308, CVE-2026-120017: Authentication bypass in SAML2 Service Provider.<\/li><li>Additionally, CVE-2026-109803 (CVSS 9.9): Code injection in NetWeaver Knowledge Management.<\/li><\/ul><h2>Why it matters<\/h2><div class=\"sw-take\"><span class=\"sw-take__k\">SafeWave Commentary<\/span>ICM, Web Dispatcher, and Gateway are the components positioned closest to the internet, partner networks, and integrations in many enterprise deployments. Exploiting them requires no valid account, yet SAP typically runs core ERP functions across finance, HR, and logistics. While active attacks have not been publicly confirmed, the window between patch disclosure and the first working exploit is often narrow for vulnerabilities of this severity. Action items: identify running kernel versions and determine which ICM, Web Dispatcher, and Gateway instances are reachable from outside the internal network; prioritize deploying the four notes to internet-facing systems; audit where SAML2 authentication is enabled; and restrict network access to Gateway until patches are applied. Vulnerability handling is one of the measures listed in Article 21 of the NIS2 Directive, so it is worth recording decisions and deadlines. More: <a href=\"https:\/\/safewave.ai\/en\/applications-api-and-cloud\/\">Applications, API, and Cloud<\/a>.<\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/article>\n\t\t<aside class=\"elementor-element elementor-element-69a7d8c e-flex e-con-boxed e-con e-parent\" data-id=\"69a7d8c\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-69a7f4a elementor-widget elementor-widget-text-editor\" data-id=\"69a7f4a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"sw-h\">Source<\/p><ul class=\"sw-src\"><li><a href=\"https:\/\/support.sap.com\/en\/my-support\/knowledge-base\/security-notes-news\/november-2026.html\" target=\"_blank\" rel=\"noopener\">SAP \u2013 SAP Security Patch Day, November 2026<\/a><\/li><li><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-120017\" target=\"_blank\" rel=\"noopener\">NVD \u2013 CVE-2026-120017<\/a><\/li><li><a href=\"https:\/\/www.infosecurity-magazine.com\/news\/microsoft-fixes-1235-flaws-record\/\" target=\"_blank\" rel=\"noopener\">Infosecurity Magazine \u2013 Microsoft Breaks Another Patch Tuesday Record with 1235 Flaws<\/a><\/li><\/ul><p class=\"sw-rel\"><a href=\"https:\/\/safewave.ai\/en\/applications-api-and-cloud\/\">Area: Applications, API, and Cloud \u2192<\/a><a href=\"https:\/\/safewave.ai\/en\/technology-intelligence\/\">All analyses \u2192<\/a><\/p><p class=\"sw-asof\">SafeWave editorial analysis based on the cited source. Facts come from the source; the &#8220;Why it matters&#8221; section is our commentary.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/aside>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>On November 10, 2026, SAP released 35 new security notes. Four vulnerabilities carry a CVSS score of 10.0, affecting ICM, Web Dispatcher, Gateway, and SAML2 in NetWeaver AS ABAP.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"elementor_header_footer","format":"standard","meta":{"footnotes":""},"categories":[275],"tags":[],"class_list":["post-16857","post","type-post","status-publish","format-standard","hentry","category-applications-api-and-cloud"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>SAP patches four CVSS 10.0 flaws: ICM, Web Dispatcher, Gateway, and SAML2 in NetWeaver vulnerable to unauthenticated takeover &#8211; SafeWave<\/title>\n<meta name=\"description\" content=\"On November 10, 2026, SAP released 35 new security notes. Four vulnerabilities carry a CVSS score of 10.0, affecting ICM, Web Dispatcher, Gateway, and SAML2 in NetWeaver AS ABAP.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/safewave.ai\/en\/sap-patches-four-cvss-10-0-flaws-icm-web-dispatcher-gateway-and-saml2-in-netweaver-vulnerable-to-unauthenticated-takeover\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"SAP patches four CVSS 10.0 flaws: ICM, Web Dispatcher, Gateway, and SAML2 in NetWeaver vulnerable to unauthenticated takeover &#8211; SafeWave\" \/>\n<meta property=\"og:description\" content=\"On November 10, 2026, SAP released 35 new security notes. Four vulnerabilities carry a CVSS score of 10.0, affecting ICM, Web Dispatcher, Gateway, and SAML2 in NetWeaver AS ABAP.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/safewave.ai\/en\/sap-patches-four-cvss-10-0-flaws-icm-web-dispatcher-gateway-and-saml2-in-netweaver-vulnerable-to-unauthenticated-takeover\/\" \/>\n<meta property=\"og:site_name\" content=\"SafeWave\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-10T08:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-11-12T01:01:18+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/safewave.ai\/wp-content\/uploads\/2026\/11\/safewave-cybersecurity-x-ai-1200x630-1.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"SafeWave\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"SafeWave\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/sap-patches-four-cvss-10-0-flaws-icm-web-dispatcher-gateway-and-saml2-in-netweaver-vulnerable-to-unauthenticated-takeover\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/sap-patches-four-cvss-10-0-flaws-icm-web-dispatcher-gateway-and-saml2-in-netweaver-vulnerable-to-unauthenticated-takeover\\\/\"},\"author\":{\"name\":\"SafeWave\",\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/#\\\/schema\\\/person\\\/9e9fc64ff61c418abb6f658be85dcf4a\"},\"headline\":\"SAP patches four CVSS 10.0 flaws: ICM, Web Dispatcher, Gateway, and SAML2 in NetWeaver vulnerable to unauthenticated takeover\",\"datePublished\":\"2026-11-10T08:00:00+00:00\",\"dateModified\":\"2026-11-12T01:01:18+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/sap-patches-four-cvss-10-0-flaws-icm-web-dispatcher-gateway-and-saml2-in-netweaver-vulnerable-to-unauthenticated-takeover\\\/\"},\"wordCount\":497,\"publisher\":{\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/#organization\"},\"articleSection\":[\"Applications, API, and Cloud\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/sap-patches-four-cvss-10-0-flaws-icm-web-dispatcher-gateway-and-saml2-in-netweaver-vulnerable-to-unauthenticated-takeover\\\/\",\"url\":\"https:\\\/\\\/safewave.ai\\\/en\\\/sap-patches-four-cvss-10-0-flaws-icm-web-dispatcher-gateway-and-saml2-in-netweaver-vulnerable-to-unauthenticated-takeover\\\/\",\"name\":\"SAP patches four CVSS 10.0 flaws: ICM, Web Dispatcher, Gateway, and SAML2 in NetWeaver vulnerable to unauthenticated takeover &#8211; SafeWave\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/#website\"},\"datePublished\":\"2026-11-10T08:00:00+00:00\",\"dateModified\":\"2026-11-12T01:01:18+00:00\",\"description\":\"On November 10, 2026, SAP released 35 new security notes. Four vulnerabilities carry a CVSS score of 10.0, affecting ICM, Web Dispatcher, Gateway, and SAML2 in NetWeaver AS ABAP.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/sap-patches-four-cvss-10-0-flaws-icm-web-dispatcher-gateway-and-saml2-in-netweaver-vulnerable-to-unauthenticated-takeover\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/safewave.ai\\\/en\\\/sap-patches-four-cvss-10-0-flaws-icm-web-dispatcher-gateway-and-saml2-in-netweaver-vulnerable-to-unauthenticated-takeover\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/sap-patches-four-cvss-10-0-flaws-icm-web-dispatcher-gateway-and-saml2-in-netweaver-vulnerable-to-unauthenticated-takeover\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/safewave.ai\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"SAP patches four CVSS 10.0 flaws: ICM, Web Dispatcher, Gateway, and SAML2 in NetWeaver vulnerable to unauthenticated takeover\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/safewave.ai\\\/en\\\/\",\"name\":\"SafeWave\",\"description\":\"We protect people, data and AI.\",\"publisher\":{\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/#organization\"},\"alternateName\":\"SafeWave sp. z o.o.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/safewave.ai\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/#organization\",\"name\":\"SafeWave\",\"alternateName\":\"SafeWave sp. z o.o.\",\"url\":\"https:\\\/\\\/safewave.ai\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/safewave.ai\\\/wp-content\\\/uploads\\\/2022\\\/05\\\/SafeWave-BLACK_350.png\",\"contentUrl\":\"https:\\\/\\\/safewave.ai\\\/wp-content\\\/uploads\\\/2022\\\/05\\\/SafeWave-BLACK_350.png\",\"width\":350,\"height\":270,\"caption\":\"SafeWave\"},\"image\":{\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/safewave-ai\",\"https:\\\/\\\/www.youtube.com\\\/@SafeWaveAI\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/#\\\/schema\\\/person\\\/9e9fc64ff61c418abb6f658be85dcf4a\",\"name\":\"SafeWave\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/65abcb7733e8dc7978eef52261952bdb2d6b542553675327aa0a3cfc74ee68bf?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/65abcb7733e8dc7978eef52261952bdb2d6b542553675327aa0a3cfc74ee68bf?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/65abcb7733e8dc7978eef52261952bdb2d6b542553675327aa0a3cfc74ee68bf?s=96&d=mm&r=g\",\"caption\":\"SafeWave\"},\"description\":\"Zesp\u00f3\u0142 SafeWave \u2013 cyberbezpiecze\u0144stwo i AI dla firm od 1998 roku. Analizy Technology Intelligence przygotowujemy z pomoc\u0105 AI i weryfikujemy redakcyjnie.\",\"sameAs\":[\"https:\\\/\\\/safewave.ai\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"SAP patches four CVSS 10.0 flaws: ICM, Web Dispatcher, Gateway, and SAML2 in NetWeaver vulnerable to unauthenticated takeover &#8211; SafeWave","description":"On November 10, 2026, SAP released 35 new security notes. Four vulnerabilities carry a CVSS score of 10.0, affecting ICM, Web Dispatcher, Gateway, and SAML2 in NetWeaver AS ABAP.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/safewave.ai\/en\/sap-patches-four-cvss-10-0-flaws-icm-web-dispatcher-gateway-and-saml2-in-netweaver-vulnerable-to-unauthenticated-takeover\/","og_locale":"en_US","og_type":"article","og_title":"SAP patches four CVSS 10.0 flaws: ICM, Web Dispatcher, Gateway, and SAML2 in NetWeaver vulnerable to unauthenticated takeover &#8211; SafeWave","og_description":"On November 10, 2026, SAP released 35 new security notes. Four vulnerabilities carry a CVSS score of 10.0, affecting ICM, Web Dispatcher, Gateway, and SAML2 in NetWeaver AS ABAP.","og_url":"https:\/\/safewave.ai\/en\/sap-patches-four-cvss-10-0-flaws-icm-web-dispatcher-gateway-and-saml2-in-netweaver-vulnerable-to-unauthenticated-takeover\/","og_site_name":"SafeWave","article_published_time":"2026-11-10T08:00:00+00:00","article_modified_time":"2026-11-12T01:01:18+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/safewave.ai\/wp-content\/uploads\/2026\/11\/safewave-cybersecurity-x-ai-1200x630-1.png","type":"image\/png"}],"author":"SafeWave","twitter_card":"summary_large_image","twitter_misc":{"Written by":"SafeWave","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/safewave.ai\/en\/sap-patches-four-cvss-10-0-flaws-icm-web-dispatcher-gateway-and-saml2-in-netweaver-vulnerable-to-unauthenticated-takeover\/#article","isPartOf":{"@id":"https:\/\/safewave.ai\/en\/sap-patches-four-cvss-10-0-flaws-icm-web-dispatcher-gateway-and-saml2-in-netweaver-vulnerable-to-unauthenticated-takeover\/"},"author":{"name":"SafeWave","@id":"https:\/\/safewave.ai\/en\/#\/schema\/person\/9e9fc64ff61c418abb6f658be85dcf4a"},"headline":"SAP patches four CVSS 10.0 flaws: ICM, Web Dispatcher, Gateway, and SAML2 in NetWeaver vulnerable to unauthenticated takeover","datePublished":"2026-11-10T08:00:00+00:00","dateModified":"2026-11-12T01:01:18+00:00","mainEntityOfPage":{"@id":"https:\/\/safewave.ai\/en\/sap-patches-four-cvss-10-0-flaws-icm-web-dispatcher-gateway-and-saml2-in-netweaver-vulnerable-to-unauthenticated-takeover\/"},"wordCount":497,"publisher":{"@id":"https:\/\/safewave.ai\/en\/#organization"},"articleSection":["Applications, API, and Cloud"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/safewave.ai\/en\/sap-patches-four-cvss-10-0-flaws-icm-web-dispatcher-gateway-and-saml2-in-netweaver-vulnerable-to-unauthenticated-takeover\/","url":"https:\/\/safewave.ai\/en\/sap-patches-four-cvss-10-0-flaws-icm-web-dispatcher-gateway-and-saml2-in-netweaver-vulnerable-to-unauthenticated-takeover\/","name":"SAP patches four CVSS 10.0 flaws: ICM, Web Dispatcher, Gateway, and SAML2 in NetWeaver vulnerable to unauthenticated takeover &#8211; SafeWave","isPartOf":{"@id":"https:\/\/safewave.ai\/en\/#website"},"datePublished":"2026-11-10T08:00:00+00:00","dateModified":"2026-11-12T01:01:18+00:00","description":"On November 10, 2026, SAP released 35 new security notes. Four vulnerabilities carry a CVSS score of 10.0, affecting ICM, Web Dispatcher, Gateway, and SAML2 in NetWeaver AS ABAP.","breadcrumb":{"@id":"https:\/\/safewave.ai\/en\/sap-patches-four-cvss-10-0-flaws-icm-web-dispatcher-gateway-and-saml2-in-netweaver-vulnerable-to-unauthenticated-takeover\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/safewave.ai\/en\/sap-patches-four-cvss-10-0-flaws-icm-web-dispatcher-gateway-and-saml2-in-netweaver-vulnerable-to-unauthenticated-takeover\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/safewave.ai\/en\/sap-patches-four-cvss-10-0-flaws-icm-web-dispatcher-gateway-and-saml2-in-netweaver-vulnerable-to-unauthenticated-takeover\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/safewave.ai\/en\/"},{"@type":"ListItem","position":2,"name":"SAP patches four CVSS 10.0 flaws: ICM, Web Dispatcher, Gateway, and SAML2 in NetWeaver vulnerable to unauthenticated takeover"}]},{"@type":"WebSite","@id":"https:\/\/safewave.ai\/en\/#website","url":"https:\/\/safewave.ai\/en\/","name":"SafeWave","description":"We protect people, data and AI.","publisher":{"@id":"https:\/\/safewave.ai\/en\/#organization"},"alternateName":"SafeWave sp. z o.o.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/safewave.ai\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/safewave.ai\/en\/#organization","name":"SafeWave","alternateName":"SafeWave sp. z o.o.","url":"https:\/\/safewave.ai\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/safewave.ai\/en\/#\/schema\/logo\/image\/","url":"https:\/\/safewave.ai\/wp-content\/uploads\/2022\/05\/SafeWave-BLACK_350.png","contentUrl":"https:\/\/safewave.ai\/wp-content\/uploads\/2022\/05\/SafeWave-BLACK_350.png","width":350,"height":270,"caption":"SafeWave"},"image":{"@id":"https:\/\/safewave.ai\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/safewave-ai","https:\/\/www.youtube.com\/@SafeWaveAI"]},{"@type":"Person","@id":"https:\/\/safewave.ai\/en\/#\/schema\/person\/9e9fc64ff61c418abb6f658be85dcf4a","name":"SafeWave","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/65abcb7733e8dc7978eef52261952bdb2d6b542553675327aa0a3cfc74ee68bf?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/65abcb7733e8dc7978eef52261952bdb2d6b542553675327aa0a3cfc74ee68bf?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/65abcb7733e8dc7978eef52261952bdb2d6b542553675327aa0a3cfc74ee68bf?s=96&d=mm&r=g","caption":"SafeWave"},"description":"Zesp\u00f3\u0142 SafeWave \u2013 cyberbezpiecze\u0144stwo i AI dla firm od 1998 roku. Analizy Technology Intelligence przygotowujemy z pomoc\u0105 AI i weryfikujemy redakcyjnie.","sameAs":["https:\/\/safewave.ai"]}]}},"_links":{"self":[{"href":"https:\/\/safewave.ai\/en\/wp-json\/wp\/v2\/posts\/16857","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/safewave.ai\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/safewave.ai\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/safewave.ai\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/safewave.ai\/en\/wp-json\/wp\/v2\/comments?post=16857"}],"version-history":[{"count":2,"href":"https:\/\/safewave.ai\/en\/wp-json\/wp\/v2\/posts\/16857\/revisions"}],"predecessor-version":[{"id":16866,"href":"https:\/\/safewave.ai\/en\/wp-json\/wp\/v2\/posts\/16857\/revisions\/16866"}],"wp:attachment":[{"href":"https:\/\/safewave.ai\/en\/wp-json\/wp\/v2\/media?parent=16857"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/safewave.ai\/en\/wp-json\/wp\/v2\/categories?post=16857"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/safewave.ai\/en\/wp-json\/wp\/v2\/tags?post=16857"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}