Blog

Welcome to the smarterSec Blog - your go-to source for insights, updates, and best practices in SAP Security, Compliance and GDPR.

“RSBDCOS0” – Is the Decommissioning Too Short-Sighted?

With the Security Patch Day in May 2026, SAP has decided to discontinue the “RSBDCOS0” report. Is this decision too shortsighted? What does this report actually do? As an SAP customer, what should I be aware of? We’ll answer these questions in this blog post.

SAP Security Patchday 05/2026: Say “Farewell” to an Old Friend

May’s SAP Patch Day brings 15 new security notes, including two rated CVSS 9.6 — one SQL injection hitting NetWeaver AS ABAP and S/4HANA, one targeting SAP Commerce Cloud. Also on the agenda: the long-overdue retirement of RSBDCOS0, and a supply chain attack note with the eyebrow-raising score of CVSS 0.0. Here’s what you need to act on — and why.

SAP Security Patchday 04/2026: Why Names and Scores Can Be Deceiving

The April 2026 SAP Security Patchday shows why CVSS scores alone can be misleading: while a critical CVSS 9.9 vulnerability demands immediate action, even low-rated issues like a CVSS 2.0 ABAP injection can enable serious attacks. With a shift toward vulnerabilities in OData, ICF, and RAP models, understanding the context of your SAP landscape is more important than ever.

SAP Security Patchday 02/2026: smarterSec says “Sorry, but not sorry”

In February 2026, the monthly SAP Security Patch Day once again calls for comprehensive measures: SAP is delivering 27 new patches, including critical HotNews that companies cannot afford to ignore – including necessary kernel updates. smarterSec says, “Sorry, but not sorry.”

SAP Security Patch Day 07/2023

SAP Security Patch Day in July with 18 new Security Notes – two of them importable in our HCM system.

SAP Security Patch Day 06/2023

With the SAP Security Patch Day for the month of June, there are 13 new notes to work on.

SAP Security Patch Day 05/2023

As part of the SAP Security patch day for the month of May, a total of 25 notes were published or updated.

SAP Security Patch Day 03/2023

If you look at the security notes from the month of March 2023, many different vulnerability types are represented

SAP Security Patch Day 02/2023

The thematic focus was on vulnerabilities from browser-based applications such as Cross Site Scripting (XSS) or Cross Site Request Forgery (XSRF).

SAP Security Patch Day 01/2023

While only 12 notes have been released since December 2022, there are 7 with a CVSS rating higher than 9.