SAP security advisory – August 2026 monthly rollup (AV26

Serial Number: AV26-798 Date: August 11, 2026 Updated: August 17, 2026 As of August 11, 2026, SAP is affected by vulnerabilities in the following products: - SAP Commerce Cloud (Data Hub Adapter) - Versions COM_CLOUD 2211 and 2211-JDK21 - SAP Manufacturing Integration and Intelligence - Versions XMII 15.4, 15.5, MII_ADMIN 15.4 and 15.5 - SAP NetWeaver and ABAP Platform - Versions KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.22EXT, 7.22EXT2, 7.22EXT3, 7.53, 7.54, 7.77, 7.89, 7.93, 8.04, 9.16 9.18, 9.19, KERNEL 7.22, 7.53, 7.54, 7.77, 7.89, 7.93, 8.04, 9.16, 9.18 and 9.19 - SAP Manufacturing Integration and Intelligence - Version MII 15.4, 15.5 - SAP Change and Transport System Attach Tool (ctsattach) - Version CTS_UPLOAD_CLT 1 - SAP ABAP Developer Tools - Versions AP_BASIS 750, SAP_BASIS 751, SAP_BASIS 752, SAP_BASIS 753, SAP_BASIS 754, SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, SAP_BASIS 758, SAP_BASIS 816 and SAP_BASIS 918, SAP_BASIS 920 - SAP Commerce Cloud - Versions OM_CLOUD 2211, 2211-JDK21 and DHUB_CLOUD 2211, 2211-JDK21 - SAP BusinessObjects Business Intelligence Platform (Central Management Server) - Versions AP_BASIS 750, SAP_BASIS 751, SAP_BASIS 752, SAP_BASIS 753, SAP_BASIS 754, SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, SAP_BASIS 758, SAP_BASIS 816, SAP_BASIS 918, SAP_BASIS 920, ENTERPRISE 430, 2025 and 2027 - SAP Manufacturing Integration and Intelligence - Versions MII 15.4 and 15.5 Update 1 Open-source reporting indicates that CVE-2026-58231 is being exploited in the wild. The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.