CERT24SAP warns of a maximum-severity OAuth2 SSRF vulnerabilityLoading data…
CERT24Threat Observatory
Period

SAP warns of a maximum-severity OAuth2 SSRF vulnerability

SAP addressed 20 security flaws across multiple products in its October 2026 security updates, including a maximum-severity vulnerability in the SAP Cloud SDK for Python. Tracked as CVE-2026-89111, the flaw may allow remote attackers without privileges to steal credentials.

← Back to intelligence

SAP warns of a maximum-severity OAuth2 SSRF vulnerability

SAP addressed 20 security flaws across multiple products in its October 2026 security updates, including a maximum-severity vulnerability in the SAP Cloud SDK for Python. Tracked as CVE-2026-89111, the flaw may allow remote attackers without privileges to steal credentials.