SAP has remediated multiple security vulnerabilities across a broad set of its products such as SAP Extended Passport Protocol processing library, SAP NetWeaver Message Server, @sap/cds-mtxs NPM library, SAP GUI for Java, SAP ABAP Development Tools for SAP NetWeaver AS ABAP, SAP Integration Suite, SAP NetWeaver Business Client, SAP Web Dispatcher, Internet Communication Manager, SAP Content Server, SAP S/4HANA Intercompany Matching and Reconciliation module, and SAP Manufacturing Integration and Intelligence. The vulnerabilities correspond to various CWEs including buffer overflows (CWE-120), improper access control (CWE-862), injection flaws (CWE-89), and others. The advisory is published by the Nationaal Cyber Security Centrum under advisory ID NCSC-2026-0356 and references 11 CVEs. No CVSS scores or detailed exploit information are provided, and no affected versions are explicitly stated.

The vulnerabilities affect multiple SAP components and could potentially lead to issues such as memory corruption, improper access control, injection attacks, and other security weaknesses as indicated by the CWEs. However, no specific impact details or exploitation in the wild have been reported. The broad range of affected products suggests a wide potential attack surface if unpatched.

SAP has released fixes for these vulnerabilities as indicated by the advisory stating they have been addressed. Users should apply the official patches or updates provided by SAP for the affected products. Since no affected versions or patch links are provided here, users should consult the official SAP security advisories and the Nationaal Cyber Security Centrum advisory NCSC-2026-0356 for detailed remediation instructions and version applicability.