CVE ID :CVE-2026-97381 Published : Oct. 13, 2026, 10:19 p.m. | 1 hour, 13 minutes ago Description :Legacy Update is a tool for activating and installing updates on legacy Windows PCs. Legacy Update 1.12.0…
CVE-2026-95634 – CAI Content Credentials | Server-Side Request Forgery (SSRF) (CWE-918)
CVE ID :CVE-2026-95634 Published : Oct. 13, 2026, 10:19 p.m. | 1 hour, 13 minutes ago Description :CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege…
CVE-2026-96956 – SQL Server Elevation of Privilege Vulnerability
CVE ID :CVE-2026-96956 Published : Oct. 13, 2026, 9:20 p.m. | 2 hours, 12 minutes ago Description :Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network. Severity:…
CVE-2026-95639 – Photoshop Desktop | Incorrect Authorization (CWE-863)
CVE ID :CVE-2026-95639 Published : Oct. 13, 2026, 9:19 p.m. | 2 hours, 12 minutes ago Description :Photoshop Desktop is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in…
CVE-2026-89113 – SQL Injection vulnerability in SAP Commerce Cloud (OOTB Code)
CVE ID :CVE-2026-89113 Published : Oct. 13, 2026, 1:16 a.m. | 15 minutes ago Description :SAP Commerce Cloud does not sufficiently validate certain user-supplied input before it is incorporated into a database query….
CVE-2026-89111 – OAuth2 SSRF vulnerability in SAP Cloud SDK for Python
CVE ID :CVE-2026-89111 Published : Oct. 13, 2026, 1:16 a.m. | 15 minutes ago Description :The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker who…
CVE-2026-89110 – Broken Access Control in SAP NetWeaver Visual Composer
CVE ID :CVE-2026-89110 Published : Oct. 13, 2026, 1:16 a.m. | 15 minutes ago Description :SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal functionality. An attacker with low…
CVE-2026-89108 – Missing Authorization check in SAP Manufacturing Integration and Intelligence (Configuration Service)
CVE ID :CVE-2026-89108 Published : Oct. 13, 2026, 1:16 a.m. | 15 minutes ago Description :SAP Manufacturing Integration and Intelligence does not sufficiently enforce authorization boundaries within certain administrative functionality. An attacker with…
CVE-2026-89107 – Code Injection vulnerability in SAP S/4HANA (Manage Substitution/Validation Rules)
CVE ID :CVE-2026-89107 Published : Oct. 13, 2026, 1:16 a.m. | 15 minutes ago Description :SAP S/4HANA (Manage Substitution/Validation Rules) does not sufficiently validate input processed by rule definition functionality that utilizes a…
CVE-2026-93892 – Security Vulnerability identified in IBM TRIRIGA – Information Disclosure in Admin Console
CVE ID :CVE-2026-93892 Published : Oct. 12, 2026, 11:17 p.m. | 14 minutes ago Description :IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due…