CVE ID :CVE-2026-120017 Published : Nov. 10, 2026, 12:43 a.m. | 32 minutes ago Description :SAP NetWeaver AS ABAP and ABAP Platform does not perform sufficient verification of incoming authentication assertions under certain…
CVE-2026-120008 – Memory Corruption Vulnerability in SAP NetWeaver (Internet Graphics Service)
CVE ID :CVE-2026-120008 Published : Nov. 10, 2026, 12:41 a.m. | 34 minutes ago Description :SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming requests. An unauthenticated user…
CVE-2026-109803 – Code Injection vulnerability in SAP NetWeaver Knowledge Management (XML Forms)
CVE ID :CVE-2026-109803 Published : Nov. 10, 2026, 12:38 a.m. | 36 minutes ago Description :SAP NetWeaver Knowledge Management (XML Forms) does not sufficiently restrict the selection of XSL transformations processed by the…
CVE-2026-109798 – XML External Entity (XXE) Vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence)
CVE ID :CVE-2026-109798 Published : Nov. 10, 2026, 12:37 a.m. | 37 minutes ago Description :SAP BusinessObjects Business Intelligence Platform (Web Intelligence) does not properly restrict external entity resolution when processing OLAP connection…
CVE-2026-109795 – Missing authorization check in S4CRM
CVE ID :CVE-2026-109795 Published : Nov. 10, 2026, 12:37 a.m. | 38 minutes ago Description :SAP NetWeaver does not perform necessary authorization checks and lacks sufficient input validation in certain remote-enabled functionality. An…
CVE-2026-115934 – SQL injection leading to privilege escalation
CVE ID :CVE-2026-115934 Published : Nov. 9, 2026, 10:57 p.m. | 17 minutes ago Description :An unauthenticated SQL injection in the element search endpoint allows stacked query execution, enabling escalation to an administrator….
CVE-2026-125120 – Mongoose: sanitizeFilter not applied on countDocuments
CVE ID :CVE-2026-125120 Published : Nov. 9, 2026, 10:36 p.m. | 39 minutes ago Description :Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Prior to 6.13.11, 7.8.12,…
CVE-2026-125117 – Mongoose walks into inherited properties when hydrating, setting, and merging, allowing overwrites of built-in functions (denial of service) and shared schema state
CVE ID :CVE-2026-125117 Published : Nov. 9, 2026, 10:26 p.m. | 48 minutes ago Description :Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Prior to 6.13.12, 7.8.13,…
CVE-2026-102643 – AsyncSSH: SFTPServer Chroot Escape
CVE ID :CVE-2026-102643 Published : Nov. 9, 2026, 9:51 p.m. | 1 hour, 23 minutes ago Description :AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol…
CVE-2026-123816 – pyLoad: Authentication bypass in API key validation (check_apikey cache)
CVE ID :CVE-2026-123816 Published : Nov. 9, 2026, 9:15 p.m. | 1 hour, 59 minutes ago Description :pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, Api.check_apikey caches successful…