SAP Rushes Emergency Security Updates For Critical Commerce Cloud & S/4HANA Vulnerabilities

German enterprise software giant SAP has released a sweeping set of security updates addressing multiple vulnerabilities across its enterprise software ecosystem, including two critical flaws affecting its flagship Commerce Cloud and S/4HANA platforms — systems widely used by multinational corporations, government agencies, manufacturers, retailers, and financial institutions worldwide.

The May 2026 security release includes patches for 15 separate vulnerabilities spanning several SAP products, according to advisories published by the company. Security researchers and analysts warn the flaws could have posed serious risks to organizations running internet-facing SAP environments, particularly amid a broader surge in attacks targeting enterprise resource planning (ERP) systems and cloud infrastructure.