Topic

Pre-Authentication Remote Code Execution

A class of vulnerability in which an attacker runs code on a target system before any login, role or authorisation check is applied.

Current clusters

security2 publishers

Onapsis counts three network paths to the same unauthenticated SAP kernel flaw

SAP shipped Security Note 3747649 on September 8 for CVE-2026-44756, a memory corruption bug in Extended Passport processing that Onapsis says gives unauthenticated callers command execution as the account owning the SAP install.

Publishers:securityweek.comsocprime.com

Reality

Evidence72
Adoption24
Hype gap+14
Incentives68
Confidence66