Critical Security Vulnerabilities Patched: Patch Tuesday August 2026

Patch Tuesday in August 2026 brings another round of critical security updates. The focus is particularly on several actively exploited zero-day vulnerabilities in Microsoft products as well as critical security flaws in SAP environments and enterprise infrastructures.

Microsoft: Three Zero-Days Closed

Microsoft is releasing security updates for Windows 10, Windows 11, and the supported server versions. Particularly relevant this month are three patched zero-day vulnerabilities:

• CVE-2026-62832
• CVE-2026-72971
• CVE-2026-68820

The vulnerabilities affect core components of enterprise infrastructure and require prompt action. The complete overview of affected products can be found in the Microsoft Update Guide.

SAP & Enterprise Infrastructure: Critical Updates for Enterprise Applications

SAP has also released several critical security updates in August. Organizations should particularly prioritize the following vulnerability:

• Code Injection Vulnerability in SAP Manufacturing Integration and Intelligence – This vulnerability can have significant impacts on the security of business-critical manufacturing processes.

The vulnerabilities affect core SAP components and, depending on system configuration, can have considerable impacts on the availability and security of business-critical applications. SAP provides further details in the current Security Notes.

In addition, other vendors have released security updates:

• Adobe: Security updates for various products
• Cisco: Security updates for multiple products
• VMware: Security updates for VMware Avi Load Balancer, addressing vulnerabilities related to authentication bypass and remote code execution

Background: What is Patch Tuesday?

Patch Tuesday refers to the second Tuesday of each month, when Microsoft releases bundled security updates for its products. The established release rhythm helps organizations and IT departments plan and implement update and maintenance windows to promptly secure systems against known threats.