In this monthly cycle, 27 new notes have been released, and 3 existing notes have been updated. Below, you’ll find the key highlights grouped by priority. For a full breakdown, scroll to the end of this post.

HotNews – Deserialization vulnerabilities

A notable total of 6 HotNews notes have been published this month — quite a high number. On closer inspection, all except one (note 3618955) address the same underlying issue: insecure deserialization. That raises the question: What exactly does this mean, and why is it significant?

High priority notes

Next up are the ‘High’ priority notes. While not as critical as the ‘HotNews’ items, these still describe serious security vulnerabilities — and should not be taken lightly.

Four notes in this category are newly released, and one is updated. In most cases, it’s simply a matter of applying the available fixes. Some noteworthy points:

• Note 3600846: This is not a software patch but requires manual steps for the deletion and regeneration of an HMAC key. See FAQ note 3601141 for clarification.
• Note 3623440: There is a workaround by restricting S_RFC to functions or function groups.
• Note 3610591: This has only been updated with minor textual changes.

Medium and Low-priority notes

19 notes fall in the ‘Medium’ or ‘Low’ category. Also, here: the majority is about simply applying the fixes.

Who hasn’t heard of SAPCAR?

Every technical SAP consultant is familiar with the archiving utility SAPCAR—a command-line tool developed by SAP for archiving and unarchiving files with the ‘.SAR’ extension. Looks like someone has been researching this tool recently because we see 3 notes concerning SAPCAR: notes 3595143, 3595156, and 3595141. This once again highlights an important truth: security isn’t just about the core technology stacks—it extends to all components, no matter how insignificant they may seem. And in SAP landscapes, those components are many!

SecurityBridge findings

At SecurityBridge, we don’t just deliver a comprehensive SAP security platform for our customers—we’re also deeply committed to ongoing research in the SAP security domain.

This continuous effort frequently leads to the discovery of new vulnerabilities, which we responsibly disclose and address in close cooperation with SAP. Building on last month’s contributions, we’re proud to share our latest finding: SAP Note 3608156.