https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:04:42.194559+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-09084 bdu:2026-09084 2026-10-03T04:04:42.201353+00:00 bdu:2026-09084 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0434 certfr-2026-avi-0434 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… 2026-10-03T04:04:42.201404+00:00 certfr-2026-avi-0434 https://cve.radiocsirt.org/vuln/euvd-2026-291118 EUVD-2026-291118 2026-10-03T04:04:42.201441+00:00 EUVD-2026-291118 https://cve.radiocsirt.org/vuln/fkie_cve-2026-27679 fkie_cve-2026-27679 2026-10-03T04:04:42.201463+00:00

Due to missing authorization checks in the SAP S/4HANA frontend OData Service (Manage Reference Structures), an attacker could update and delete child entities via exposed OData services without proper authorization. This vulnerability has a high impact on integrity, while confidentiality and availability are not impacted.

 https://cve.radiocsirt.org/vuln/ghsa-fcjm-cm6x-4v66 GHSA-fcjm-cm6x-4v66 2026-10-03T04:04:42.201509+00:00

Due to missing authorization checks in the SAP S/4HANA frontend OData Service (Manage Reference Structures), an attacker could update and delete child entities via exposed OData services without proper authorization. This vulnerability has a high impact on integrity, while confidentiality and availability are not impacted.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0113 NCSC-2026-0113 — Kwetsbaarheden verholpen in SAP-producten 2026-10-03T04:04:42.201539+00:00 NCSC-2026-0113 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1078 WID-SEC-W-2026-1078 — SAP Patchday April 2026: Mehrere Schwachstellen 2026-10-03T04:04:42.201589+00:00

Ein Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um SQL-Injection durchzuführen, erweiterte Berechtigungen zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder andere nicht näher spezifizierte Auswirkungen zu verursachen.