https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:56:10.528053+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0114 certfr-2025-avi-0114 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… 2026-10-02T20:56:10.581763+00:00 certfr-2025-avi-0114 https://cve.radiocsirt.org/vuln/cnvd-2025-03435 cnvd-2025-03435 2026-10-02T20:56:10.581803+00:00 cnvd-2025-03435 https://cve.radiocsirt.org/vuln/euvd-2026-218554 EUVD-2026-218554 2026-10-02T20:56:10.581818+00:00 EUVD-2026-218554 https://cve.radiocsirt.org/vuln/fkie_cve-2025-24876 fkie_cve-2025-24876 2026-10-02T20:56:10.581829+00:00

The SAP Approuter Node.js package version v16.7.1 and before is vulnerable to Authentication bypass. When trading an authorization code an attacker can steal the session of the victim by injecting malicious payload causing High impact on confidentiality and integrity of the application

 https://cve.radiocsirt.org/vuln/ghsa-cpfx-964w-4jvp GHSA-cpfx-964w-4jvp — Authentication bypass in @sap/approuter 2026-10-02T20:56:10.581856+00:00

Affected: npm: @sap/approuter

The SAP Approuter Node.js package version v16.7.1 and before is vulnerable to Authentication bypass. When trading an authorization code, an attacker can steal the session of the victim by injecting malicious payload, causing High impact on confidentiality and integrity of the application.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0307 WID-SEC-W-2025-0307 — SAP Patchday Februar 2025: Mehrere Schwachstellen 2026-10-02T20:56:10.581878+00:00

Ein Angreifer kann mehrere Schwachstellen in der SAP-Software ausnutzen, um erhöhte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting- und Spoofing-Angriffe durchzuführen, Daten zu manipulieren, vertrauliche Informationen preiszugeben und einen Denial-of-Service-Zustand zu verursachen.