CVE-2026-89111Vulnerability
Reported by 5 independent sources · first reported by CERT-FR · last reported
Last reported 5 days ago
higher than 18% of CVEsFIRST EPSS, as of 24 Oct 2026
What the reports say
6 reports, newest first · the exact sentence from each-
⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More“…2026-103527, CVE-2026-103528, CVE-2026-103529, CVE-2026-103535, CVE-2026-103537, CVE-2026-107248 (Thelia), CVE-2026-105445 (Docker), CVE-2026-89111, CVE-2026-89110, CVE-2026-89107, CVE-2026-89108, CVE-2026-89113 (SAP), CVE-2026-39919 (Ghostscript), CVE-2026-103849 aka BlockStrap,…”
-
CVE-2026-89111: Critical SAP Cloud SDK SSRF“CVE-2026-89111: Critical SAP Cloud SDK SSRF”
-
Boletín mensual de seguridad de SAP de octubre de 2026“CVE-2026-89111: vulnerabilidad Server-Side Request Forgery (SSRF) en el mecanismo OAuth2 de SAP Cloud SDK for Python.”
-
SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities“At the top of the list is CVE-2026-89111 (CVSS score of 10/10), an OAuth2 SSRF vulnerability in Cloud SDK for Python that impacts multi-tenant BTP applications.”
-
SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft“The flaw is tracked as CVE-2026-89111 and carries SAP's CVSS score of 10.0 out of 10.”
-
Multiples vulnérabilités dans les produits SAP (13 octobre 2026)“Référence CVE CVE-2026-89111”
Indicators reported together
named in the same reportsAlso named with it: CVE-2026-89110, CVE-2026-89107, CVE-2026-89108, CVE-2026-89113, CVE-2026-34073, CVE-2021-36260, CVE-2026-83498, CVE-2026-74580, CVE-2026-79724, CVE-2026-85025, CVE-2026-81204, CVE-2026-103947, CVE-2026-103946, CVE-2026-106126, CVE-2026-14814, CVE-2026-16301, CVE-2026-92883, CVE-2026-97229, CVE-2026-85947, CVE-2026-85948
Thanks — we review every report.