SAP Security Patchday 04/2026: Why Names and Scores Can Be Deceiving
The April 2026 SAP Security Patchday shows why CVSS scores alone can be misleading: while a critical CVSS 9.9 vulnerability demands immediate action, even low-rated issues like a CVSS 2.0 ABAP injection can enable serious attacks. With a shift toward vulnerabilities in OData, ICF, and RAP models, understanding the context of your SAP landscape is more important than ever.