SAP Güvenlik Uyarıları - Kasım 2026

📊 Aylık Özet

2026 yılının Kasım ayında toplam 43 güvenlik uyarısı yayınlandı.

Risk Dağılımı

Kritiklik Seviyesi	Sayı	CVSS Aralığı
🚨 Kritik	9	9.0 - 10.0
⚠️ Yüksek	13	7.0 - 8.9
⚡ Orta	20	4.0 - 6.9
ℹ️ Düşük	1	0.1 - 3.9

⚠️ Kritik Uyarı

Bu ayda 9 kritik güvenlik uyarısı tespit edildi. Bu uyarılar acil eylem gerektirir ve en kısa sürede ele alınmalıdır.

📋 Detaylı Güvenlik Uyarıları Tablosu

SAP Note	CVE No	Açıklama	CVSS Skoru	Kritiklik	Etkilenen Uygulamalar
-	CVE-2026-109809	SAP Security Patch Day - CVE-2026-109809	-	⚡ Orta	SAP NetWeaver Application Server Java (NWDI Cockpit) Version(s) - DI_NTY 7.50
-	CVE-2026-109797	SAP Security Patch Day - CVE-2026-109797	-	⚡ Orta	SAP/astonish Version(s) < v3.6.0
-	CVE-2026-120012	SAP Security Patch Day - CVE-2026-120012	-	⚡ Orta	SAP Cloud SDK for AI, SAP Cloud SDK for AI(JavaScript) Library - SAP Cloud SDK for AI(JavaScript) Version(s)
-	CVE-2026-120013	SAP Security Patch Day - CVE-2026-120013	-	⚡ Orta	SAP Cloud SDK for Python Library, SAP Cloud SDK for Python Version, SAP Cloud SDK for Python Library - SAP Cloud SDK for Python Version(s)
-	CVE-2026-109807	SAP Security Patch Day - CVE-2026-109807	-	⚡ Orta	SAP NetWeaver (Internet Graphics Service) Version(s) - BC-FES-IGS 7.20EXT, 7.20_EXT2, 7.53
-	CVE-2026-109799	SAP Security Patch Day - CVE-2026-109799	-	⚡ Orta	SAP Cloud SDK for Python Version, SAP Cloud SDK for Python Version(s)
-	CVE-2026-109796	SAP Security Patch Day - CVE-2026-109796	-	⚡ Orta	SAP NetWeaver and ABAP Platform Version(s) - KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22
-	CVE-2026-120014	SAP Security Patch Day - CVE-2026-120014	-	⚡ Orta	SAP Web Dispatcher and Internet Communication Manager Version(s) - WEBDISP 7.93, 9.16, XS_ADVANCED_RUNTIME 1.00
3849308	CVE-2026-120017	SAP Security Patch Day - CVE-2026-120017	10.0	🚨 Kritik	SAP NetWeaver AS ABAP and ABAP Platform (SAML2 Service Provider) Version(s) - SAP_BASIS 702, SAP_BASIS 731, SAP_BASIS 740
3798345	CVE-2026-89103	SAP Security Patch Day - CVE-2026-89103	10.0	🚨 Kritik	SAP Gateway Version(s) - KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22
3778556	CVE-2026-89126	SAP Security Patch Day - CVE-2026-89126	10.0	🚨 Kritik	SAP Web Dispatcher Version(s) - HDB 2.00, KRNL64UC 7.53, WEBDISP 7.53
3778530	CVE-2026-76964	SAP Security Patch Day - CVE-2026-76964	10.0	🚨 Kritik	SAP NetWeaver AS ABAP (Internet Communication Manager) Version(s) - KRNL64UC 7.53, KERNEL 7.53, 7.54
3834842	CVE-2026-109795	SAP Security Patch Day - CVE-2026-109795	9.9	🚨 Kritik	S4CRM Version(s) - S4CRM 204, S4CEXT 107, BBPCRM 713
3792735	CVE-2026-76965	SAP Security Patch Day - CVE-2026-76965	9.9	🚨 Kritik	SAP NetWeaver and ABAP Platform Version(s) - KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22
3809153	CVE-2026-109803	SAP Security Patch Day - CVE-2026-109803	9.9	🚨 Kritik	SAP NetWeaver Knowledge Management (XML Forms) Version(s) - KMC-CM 7.50
3804858	CVE-2026-89119	SAP Security Patch Day - CVE-2026-89119	9.6	🚨 Kritik	SAP Web Dispatcher and Internet Communication Manager Version(s) - WEBDISP 7.93, 9.16, XS_ADVANCED_RUNTIME 1.00
3799117	CVE-2026-109798	SAP Security Patch Day - CVE-2026-109798	9.1	🚨 Kritik	SAP BusinessObjects Business Intelligence Platform (Web Intelligence) Version(s) - ENTERPRISE 430, 2025, 2027
3769130	CVE-2026-76966	SAP Security Patch Day - CVE-2026-76966	8.9	⚠️ Yüksek	SAP NetWeaver and ABAP Platform Version(s) - KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22
3809953	CVE-2026-120008	SAP Security Patch Day - CVE-2026-120008	8.2	⚠️ Yüksek	SAP NetWeaver (Internet Graphics Service) Version(s) - BC-FES-IGS 7.20EXT, 7.20_EX2, 7.53
3803832	CVE-2026-109800	SAP Security Patch Day - CVE-2026-109800	7.7	⚠️ Yüksek	SAP Web Dispatcher Version(s) - KRNL64UC 7.53, WEBDISP 7.53, 7.54
3842766	CVE-2026-120015	SAP Security Patch Day - CVE-2026-120015	7.5	⚠️ Yüksek	SAP Host Agent Version(s) - SAPHOSTAGENT 7.22
3805681	CVE-2026-109794	SAP Security Patch Day - CVE-2026-109794	7.5	⚠️ Yüksek	SAP NetWeaver Application Server ABAP, ABAP Platform and SAP Web Dispatcher Version(s) - WEBDISP 7.77, 7.93
3789273	CVE-2026-76973	SAP Security Patch Day - CVE-2026-76973	7.5	⚠️ Yüksek	SAP NetWeaver and ABAP Platform (SAP Message Server) Version(s) - KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22
3810485	CVE-2026-89114	SAP Security Patch Day - CVE-2026-89114	7.5	⚠️ Yüksek	SAP NetWeaver AS Java EDM Application Version(s) - CE-RA-EDM 7.50
3808552	CVE-2026-109804	SAP Security Patch Day - CVE-2026-109804	7.5	⚠️ Yüksek	SAP NetWeaver (SAP Message Server) Version(s) - KRNL64UC 7.53, KERNEL 7.53, 7.54
3792915	CVE-2026-76970	SAP Security Patch Day - CVE-2026-76970	7.5	⚠️ Yüksek	SAP NetWeaver and ABAP Platform Version(s) - KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22
3809934	CVE-2026-109806	SAP Security Patch Day - CVE-2026-109806	7.5	⚠️ Yüksek	SAP NetWeaver (Internet Graphics Service) Version(s) - BC-FES-IGS 7.20EXT, 7.20_EXT2, 7.53
3805570	CVE-2026-120010	SAP Security Patch Day - CVE-2026-120010	7.5	⚠️ Yüksek	SAP NetWeaver Application Server (SAP Message Server) Version(s) - KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22
3808627	CVE-2026-109793	SAP Security Patch Day - CVE-2026-109793	7.5	⚠️ Yüksek	SAP NetWeaver Application Server ABAP (Internet Communication Manager) and SAP Web Dispatcher Version(s) - WEBDISP 9.16, KERNEL 9.16, 9.20
3833364	CVE-2026-120009	SAP Security Patch Day - CVE-2026-120009	7.2	⚠️ Yüksek	SAP ABAP Developer Tools (AMDP Data Preview) Version(s) - SAP_BASIS 740, SAP_BASIS 750, SAP_BASIS 751
3839977	CVE-2026-109801	SAP Security Patch Day - CVE-2026-109801	6.5	⚡ Orta	SAP NetWeaver Application Server Java (NWDI Cockpit) Version(s) - DI_NTY 7.50
3805959	CVE-2026-109811	SAP Security Patch Day - CVE-2026-109811	6.5	⚡ Orta	SAP NetWeaver and ABAP Platform (Application Server ABAP) Version(s) - SAP_BASIS 700, SAP_BASIS 701, SAP_BASIS 702
3793716	CVE-2026-109802	SAP Security Patch Day - CVE-2026-109802	6.5	⚡ Orta	SAP NetWeaver Application Server for ABAP Version(s) - KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22
3786876	CVE-2026-109805	SAP Security Patch Day - CVE-2026-109805	6.4	⚡ Orta	SAP NetWeaver and ABAP Platform (Application Server ABAP) Version(s) - KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22
3797108	CVE-2026-109810	SAP Security Patch Day - CVE-2026-109810	6.1	⚡ Orta	SAP NetWeaver Application Server Java (Web Dynpro Java) Version(s) - WD-RUNTIME 7.50
3806484	CVE-2026-120016	SAP Security Patch Day - CVE-2026-120016	6.1	⚡ Orta	SAP NetWeaver Visual Composer Version(s) - VC70RUNTIME 7.50
3782056	CVE-2026-89125	SAP Security Patch Day - CVE-2026-89125	6.0	⚡ Orta	SAP Web Dispatcher and Internet Communication Manager Version(s) - KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22
3835738	CVE-2026-89129	SAP Security Patch Day - CVE-2026-89129	5.8	⚡ Orta	SAP NetWeaver AS Java (Web Services) Version(s) – ENGINEAPI 7.50, J2EE-FRMW 7.50
3792447	CVE-2026-89128	SAP Security Patch Day - CVE-2026-89128	5.3	⚡ Orta	Broken Access Control in SAP NetWeaver Process Integration (Process Integration Test Tool) Version(s) - SAP_XIPIT 7.50
3740168	CVE-2026-89115	SAP Security Patch Day - CVE-2026-89115	4.4	⚡ Orta	SAP Start Service and SAP Microsoft Management Console Version(s) - HDB 2.00, KRNL64NUC 7.22, 7.22EXT
3803144	CVE-2026-73635	SAP Security Patch Day - CVE-2026-73635	4.4	⚡ Orta	SAP Business Objects Version(s) – ENTERPRISE 430, 2025, 2027
3801587	CVE-2026-89131	SAP Security Patch Day - CVE-2026-89131	4.3	⚡ Orta	SAP NetWeaver Enterprise Portal Version(s) - EP-BASIS 7.50, EP-BASIS-API 7.50, EP-RUNTIME 7.50
3802244	CVE-2026-109808	SAP Security Patch Day - CVE-2026-109808	3.1	ℹ️ Düşük	SAP Solution Tools Plug-In (ST-PI) Version(s) - ST-PI 2008_1_700, 2008_1_710

🔍 Analiz ve Öneriler

Genel Değerlendirme

11. ayda yüksek risk seviyesi tespit edilmiştir. 9 kritik uyarı derhal ele alınması gereken güvenlik açıklarını işaret etmektedir. Özellikle CVSS skoru 9.0 ve üzeri olan uyarılara öncelik verilmelidir.

Güvenlik Önerileri

1. Acil Öncelikler: 9 kritik uyarı için derhal patch uygulaması yapın.

2. Orta Vadeli Planlama: Yüksek ve orta seviyeli uyarılar için 33 uyarı bulunmaktadır.

3. Sistem İzleme: Etkilenen sistemlerde güvenlik loglarını düzenli olarak izleyin.

4. Patch Yönetimi: SAP Patch Day süreçlerinizi gözden geçirin ve güncel tutun.

📚 Ek Bilgiler

• Rapor Tarihi: 12.11.2026
• Kaynak: SAP Security Alert Database
• Kapsam: Kasım 2026 ayı güvenlik uyarıları
• Toplam Uyarı: 43

---

Not: Bu rapor otomatik olarak oluşturulmuştur ve editörler tarafından gözden geçirilmektedir. Güncel bilgiler için lütfen resmi SAP güvenlik kanallarını takip edin.