security_identifier

CVE-2026-76969

Identifier for a credential disclosure flaw affecting multitenant applications built with SAP's Cloud Application Programming Model.

Current clusters

security2 publishers

Onapsis counts three network paths to the same unauthenticated SAP kernel flaw

SAP shipped Security Note 3747649 on September 8 for CVE-2026-44756, a memory corruption bug in Extended Passport processing that Onapsis says gives unauthenticated callers command execution as the account owning the SAP install.

Publishers:securityweek.comsocprime.com

Reality

Evidence72
Adoption24
Hype gap+14
Incentives68
Confidence66