Dozens of Vendors Patch Security Flaws Across Enterprise Software and Network Devices

This article covers a wave of security patches released by dozens of vendors addressing critical vulnerabilities in enterprise software and network devices.

• •SAP patched CVE-2019-17571 (CVSS 9.8), a code injection flaw in FS-QUO via outdated Apache Log4j 1.2.17, enabling unauthenticated remote code execution
• •SAP also fixed CVE-2026-27685 (CVSS 9.1), an insecure deserialization vulnerability in SAP NetWeaver Enterprise Portal Administration
• •Microsoft shipped patches for 84 vulnerabilities including privilege escalation and remote code execution flaws
• •Adobe patched 80 vulnerabilities, including critical flaws in Commerce, Magento Open Source, and Illustrator
• •HPE fixed CVE-2026-23813 (CVSS 9.8) in Aruba AOS-CX, an authentication bypass allowing unauthenticated attackers to reset admin passwords and gain full device control