CVEs
Browse the synced catalog, newest first.
- CVE-2026-109797Cross-tenant sandbox takeover in SAP/astonishSAP_SE SAP/astonish
- CVE-2026-125087Michael-A-Kuykendall Shimmy Inference API server.rs missing authenticationMichael-A-Kuykendall Shimmy
- CVE-2026-109805Weak Cryptography in SAP NetWeaver and ABAP Platform (Application Server ABAP)SAP_SE SAP NetWeaver and ABAP Platform
- CVE-2026-89125Insecure Storage of Sensitive Information in SAP Web Dispatcher and Internet Communication ManagerSAP_SE SAP Web Dispatcher and Internet Communication Manager
- CVE-2026-125086D-Link M60 emDaemon MQTT Broker mosquitto.conf system hard-coded credentialsD-Link M60
- CVE-2026-120017Missing Authentication in SAP NetWeaver AS ABAP and ABAP Platform (SAML2 Service Provider)SAP_SE SAP NetWeaver AS ABAP and ABAP Platform
- CVE-2026-120016Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Visual ComposerSAP_SE SAP NetWeaver Visual Composer
- CVE-2026-120015Insufficient Input Validation in SAP Host AgentSAP_SE SAP Host Agent
- CVE-2026-120014Cross-Site Request Forgery (CSRF) vulnerability in SAP Web Dispatcher and Internet Communication ManagerSAP_SE SAP Web Dispatcher and Internet Communication Manager
- CVE-2026-120010Memory Corruption vulnerability in SAP NetWeaver Application Server (SAP Message Server)SAP_SE SAP NetWeaver Application Server
- CVE-2026-120009Code Injection vulnerability in SAP ABAP Developer Tools (AMDP Data Preview)SAP_SE SAP ABAP Developer Tools
- CVE-2026-120008Memory Corruption Vulnerability in SAP NetWeaver (Internet Graphics Service)SAP_SE SAP NetWeaver
- CVE-2026-109811Server-Side Request Forgery (SSRF) vulnerability in SAP NetWeaver and ABAP Platform (Application Server ABAP)SAP_SE SAP NetWeaver and ABAP Platform
- CVE-2026-109810CSS Injection vulnerability in SAP NetWeaver Application Server Java (Web Dynpro Java)SAP_SE SAP NetWeaver Application Server Java
- CVE-2026-109809Security Vulnerabilities SAP NetWeaver Application Server Java (NWDI Cockpit)SAP_SE SAP NetWeaver Application Server Java
- CVE-2026-109808Missing Authorisation Check in SAP Solution Tools Plug-In (ST-PI)SAP_SE SAP Solution Tools Plug-In
- CVE-2026-109807Multiple Vulnerabilities in SAP NetWeaver (Internet Graphics Service)SAP_SE SAP NetWeaver
- CVE-2026-109806Multiple Vulnerabilities in SAP NetWeaver (Internet Graphics Service)SAP_SE SAP NetWeaver
- CVE-2026-109804Information Disclosure in SAP NetWeaver (SAP Message Server)SAP_SE SAP NetWeaver
- CVE-2026-109803Code Injection vulnerability in SAP NetWeaver Knowledge Management (XML Forms)SAP_SE SAP NetWeaver Knowledge Management
- CVE-2026-109802Denial of Service (DoS) vulnerability in SAP NetWeaver Application Server for ABAPSAP_SE SAP NetWeaver Application Server for ABAP
- CVE-2026-109801Security Vulnerabilities SAP NetWeaver Application Server Java (NWDI Cockpit)SAP_SE SAP NetWeaver Application Server Java
- CVE-2026-109800Memory Corruption vulnerability in SAP Web DispatcherSAP_SE SAP Web Dispatcher
- CVE-2026-109798XML External Entity (XXE) Vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence)SAP_SE SAP BusinessObjects Business Intelligence Platform
- CVE-2026-109796Multiple vulnerabilities in Application Server ABAP of SAP NetWeaver and ABAP PlatformSAP_SE SAP NetWeaver and ABAP Platform
- CVE-2026-109795Missing authorization check in S4CRMSAP_SE S4CRM
- CVE-2026-109794Denial of Service vulnerability in SAP NetWeaver Application Server ABAP, ABAP Platform and SAP Web DispatcherSAP_SE SAP NetWeaver Application Server ABAP, ABAP Platform…
- CVE-2026-109793Denial of Service (DoS) vulnerability in SAP NetWeaver Application Server ABAP (Internet Communication Manager) and SAP Web DispatcherSAP_SE SAP NetWeaver Application Server ABAP (Internet Comm…
- CVE-2026-89131Cross Site Request Forgery (CSRF) vulnerability in SAP NetWeaver Enterprise PortalSAP_SE SAP NetWeaver Enterprise Portal
- CVE-2026-89129Server-Side Request Forgery in SAP NetWeaver AS Java (Web Services)SAP_SE SAP NetWeaver AS Java