CVE-2026-89107Vulnerability
Reported by 5 independent sources · first reported by CERT-FR · last reported
Last reported 5 days ago
higher than 30% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
5 reports, newest first · the exact sentence from each-
⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More“…E-2026-103529, CVE-2026-103535, CVE-2026-103537, CVE-2026-107248 (Thelia), CVE-2026-105445 (Docker), CVE-2026-89111, CVE-2026-89110, CVE-2026-89107, CVE-2026-89108, CVE-2026-89113 (SAP), CVE-2026-39919 (Ghostscript), CVE-2026-103849 aka BlockStrap, CVE-2026-92909, CVE-2026-91013,…”
-
CVE-2026-89111: Critical SAP Cloud SDK SSRF“CVE-2026-89107 (CVSS 9.9): Code injection in SAP S/4HANA Manage Substitution/Validation Rules.”
-
Boletín mensual de seguridad de SAP de octubre de 2026“CVE-2026-89107: vulnerabilidad de inyección de código en la gestión de reglas de sustitución y validación de SAP S/4HANA.”
-
SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities“The third critical-severity vulnerability resolved on SAP’s October 2026 Security Patch Day is CVE-2026-89107 (CVSS score of 9.9/10), a code injection issue in S/4HANA.”
-
Multiples vulnérabilités dans les produits SAP (13 octobre 2026)“Référence CVE CVE-2026-89107”
Indicators reported together
named in the same reportsAlso named with it: CVE-2026-89111, CVE-2026-89110, CVE-2026-89108, CVE-2026-89113, CVE-2026-34073, CVE-2021-36260, CVE-2026-83498, CVE-2026-74580, CVE-2026-79724, CVE-2026-85025, CVE-2026-81204, CVE-2026-103947, CVE-2026-103946, CVE-2026-106126, CVE-2026-14814, CVE-2026-16301, CVE-2026-92883, CVE-2026-97229, CVE-2026-85947, CVE-2026-85948
Thanks — we review every report.