Dozens of Vendors Patch Security Flaws Across Enterprise Software and Network Devices

Multiple enterprise software and network device vendors have issued patches for numerous security vulnerabilities, including two critical flaws in SAP systems. A code injection vulnerability, tracked as CVE-2019-17571, affects the SAP Quotation Management Insurance application and carries a CVSS score of 9.8, indicating a high likelihood of exploitation¹. Another vulnerability, CVE-2026-27685, involves insecure deserialization and has a CVSS score of 9.1. These patches are crucial as they can prevent arbitrary code execution on affected systems. The disclosure of CVE-2019-17571 expands the active attack surface, making it essential for organizations to prioritize patches based on their exposure and evidence of exploitation. This matters to security practitioners as it highlights the need for prompt patch management to prevent potential breaches, especially given the high CVSS scores of the affected vulnerabilities.