SAP SAML bug lets attackers bypass login, urgent patch called for

The page discusses critical vulnerabilities highlighted during the June 2026 SAP security patch day. Key threats include CVE-2026-44748, which relates to an XML signature wrapping issue in SAML authentication, allowing unauthorized access potentially leading to tampering of identity data (CVSS score of 9.9). Other notable vulnerabilities are CVE-2026-27671, a memory corruption flaw in the ABAP kernel, and CVE-2026-40128, a directory traversal vulnerability in the Java Web Container. The page emphasizes the urgent need for system administrators to apply the latest patches to secure enterprise systems against these exploits.