SAP Issues Critical Patches for OAuth2 SSRF and Other Vulnerabilities
ID: c103988c-685f-5745-a44c-50ce7dd0cea9
STIX ID: report--c103988c-685f-5745-a44c-50ce7dd0cea9
Feed Name: ThreatCluster
Threat Score
On October 13, 2026 SAP released security patches addressing 20 vulnerabilities, including a critical OAuth2 SSRF (CVE-2026-89111) in the Cloud SDK for Python that can be used to exfiltrate client credentials in multi-tenant deployments; other critical issues affect NetWeaver Visual Composer, Manufacturing Integration and Intelligence, S/4HANA and SuccessFactors. Administrators are urged to apply patches immediately — no exploitation has been confirmed but rapid exploitation is possible.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.