Skip to content
securitytabs

Covered by 2 outlets — first reported by BleepingComputer, Nov 10, 12:07 UTC

SAP patches ICM2SHELL and PROXYGATE maximum severity flaws

MentionsSAP

Summary

SAP released its November 2026 security updates, which fix 35 vulnerabilities according to one count, including four rated maximum severity in its NetWeaver, Web Dispatcher and Gateway software. The flaws are nicknamed ICM2SHELL and ProxyGate. SAP's advisory tally is larger, at 42 new and updated security notes, nine of them for critical-severity flaws.

AI summary by the SecurityTabs newsroom, checked against BleepingComputer, SecurityWeek. Read the outlets below for the full story.

Continue reading

2 outlets, in the order they reported it.

  1. BleepingComputerFirst report

    SAP patches ICM2SHELL and PROXYGATE maximum severity flaws

    SAP patched 35 vulnerabilities in its November 2026 security updates, including four maximum-severity issues affecting its NetWeaver, Web Dispatcher, and Gateway software.

    Read at BleepingComputer Details

  2. SecurityWeek

    SAP Patches Critical ICM2SHELL, ProxyGate Vulnerabilities

    SAP has published 42 new and updated security advisories, including nine that address critical-severity vulnerabilities.

    Read at SecurityWeek Details