https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T21:16:20.189691+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-05442 bdu:2026-05442 2026-10-02T21:16:20.256828+00:00 bdu:2026-05442 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0434 certfr-2026-avi-0434 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… 2026-10-02T21:16:20.256871+00:00 certfr-2026-avi-0434 https://cve.radiocsirt.org/vuln/euvd-2026-291113 EUVD-2026-291113 2026-10-02T21:16:20.256891+00:00 EUVD-2026-291113 https://cve.radiocsirt.org/vuln/fkie_cve-2026-34261 fkie_cve-2026-34261 2026-10-02T21:16:20.256904+00:00

Due to a missing authorization check in SAP Business Analytics and SAP Content Management, an authenticated user could make unauthorized calls to certain remote function modules, potentially accessing sensitive information beyond their intended permissions. This vulnerability affects confidentiality, with no impact on integrity and availability.

 https://cve.radiocsirt.org/vuln/ghsa-fg5q-rjfh-rr88 GHSA-fg5q-rjfh-rr88 2026-10-02T21:16:20.256935+00:00

Due to a missing authorization check in SAP Business Analytics and SAP Content Management, an authenticated user could make unauthorized calls to certain remote function modules, potentially accessing sensitive information beyond their intended permissions. This vulnerability affects confidentiality, with no impact on integrity and availability.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0113 NCSC-2026-0113 — Kwetsbaarheden verholpen in SAP-producten 2026-10-02T21:16:20.256953+00:00 NCSC-2026-0113 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1078 WID-SEC-W-2026-1078 — SAP Patchday April 2026: Mehrere Schwachstellen 2026-10-02T21:16:20.256988+00:00

Ein Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um SQL-Injection durchzuführen, erweiterte Berechtigungen zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder andere nicht näher spezifizierte Auswirkungen zu verursachen.