CVE ID :CVE-2026-89111 Published : Oct. 13, 2026, 1:16 a.m. | 15 minutes ago Description :The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker who…
CVE-2026-89110 – Broken Access Control in SAP NetWeaver Visual Composer
CVE ID :CVE-2026-89110 Published : Oct. 13, 2026, 1:16 a.m. | 15 minutes ago Description :SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal functionality. An attacker with low…
CVE-2026-89108 – Missing Authorization check in SAP Manufacturing Integration and Intelligence (Configuration Service)
CVE ID :CVE-2026-89108 Published : Oct. 13, 2026, 1:16 a.m. | 15 minutes ago Description :SAP Manufacturing Integration and Intelligence does not sufficiently enforce authorization boundaries within certain administrative functionality. An attacker with…
CVE-2026-89107 – Code Injection vulnerability in SAP S/4HANA (Manage Substitution/Validation Rules)
CVE ID :CVE-2026-89107 Published : Oct. 13, 2026, 1:16 a.m. | 15 minutes ago Description :SAP S/4HANA (Manage Substitution/Validation Rules) does not sufficiently validate input processed by rule definition functionality that utilizes a…
CVE-2026-93892 – Security Vulnerability identified in IBM TRIRIGA – Information Disclosure in Admin Console
CVE ID :CVE-2026-93892 Published : Oct. 12, 2026, 11:17 p.m. | 14 minutes ago Description :IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due…
CVE-2026-85457 – IBM Planning Analytics Local is affected by security vulnerabilities
CVE ID :CVE-2026-85457 Published : Oct. 12, 2026, 11:17 p.m. | 14 minutes ago Description :IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to…
CVE-2026-82110 – DataStage on Cloud Pak for Data Path Traversal
CVE ID :CVE-2026-82110 Published : Oct. 12, 2026, 11:17 p.m. | 14 minutes ago Description :IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code…
CVE-2026-82108 – DataStage on Cloud Pak for Data Code Injection
CVE ID :CVE-2026-82108 Published : Oct. 12, 2026, 11:17 p.m. | 14 minutes ago Description :IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code…
CVE-2026-82103 – DataStage on Cloud Pak for Data Information Disclosure
CVE ID :CVE-2026-82103 Published : Oct. 12, 2026, 11:17 p.m. | 14 minutes ago Description :IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information…
CVE-2026-108963 – Databasement Argument Injection Remote Code Execution
CVE ID :CVE-2026-108963 Published : Oct. 11, 2026, 8:16 p.m. | 3 hours, 14 minutes ago Description :databasement before 1.8.2 allows remote code execution because it runs certain commands (e.g., mariadb-dump) with a database…