https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T00:24:29.748417+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0434 certfr-2026-avi-0434 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… 2026-10-03T00:24:29.796499+00:00 certfr-2026-avi-0434 https://cve.radiocsirt.org/vuln/euvd-2026-318620 EUVD-2026-318620 2026-10-03T00:24:29.796537+00:00 EUVD-2026-318620 https://cve.radiocsirt.org/vuln/fkie_cve-2026-27680 fkie_cve-2026-27680 2026-10-03T00:24:29.796552+00:00

Due to improper input handling under certain conditions, SAP NetWeaver Application Server ABAP allows an attacker to inject custom Cascading Style Sheets (CSS) data into a web page served by the application. When a user accesses or clicks the affected page, the injected CSS is executed. As a result, the issue has a low impact on confidentiality, while integrity and availability are not impacted.

 https://cve.radiocsirt.org/vuln/ghsa-4wqv-v86p-8q8g GHSA-4wqv-v86p-8q8g 2026-10-03T00:24:29.796581+00:00

Due to improper input handling under certain conditions, SAP NetWeaver Application Server ABAP allows an attacker to inject custom Cascading Style Sheets (CSS) data into a web page served by the application. When a user accesses or clicks the affected page, the injected CSS is executed. As a result, the issue has a low impact on confidentiality, while integrity and availability are not impacted.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0113 NCSC-2026-0113 — Kwetsbaarheden verholpen in SAP-producten 2026-10-03T00:24:29.796598+00:00 NCSC-2026-0113 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1078 WID-SEC-W-2026-1078 — SAP Patchday April 2026: Mehrere Schwachstellen 2026-10-03T00:24:29.796626+00:00

Ein Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um SQL-Injection durchzuführen, erweiterte Berechtigungen zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder andere nicht näher spezifizierte Auswirkungen zu verursachen.