SAP Patches Critical ICM2SHELL, ProxyGate Vulnerabilities

SAP disclosed maximum-severity vulnerabilities in its kernel — ICM2SHELL and ProxyGate — that allow unauthenticated remote attackers to execute code with administrative privileges, alongside a missing authentication flaw affecting additional components. These flaws require no credentials, dramatically lowering the bar for exploitation and making every unpatched SAP system an immediate target. Because SAP environments typically host sensitive business data and core enterprise processes, successful exploitation can have catastrophic operational and data-integrity consequences. Organizations that delay patching SAP kernel vulnerabilities expose themselves to full system compromise with minimal attacker effort.