https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:58:08.582577+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0567 certfr-2026-avi-0567 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… 2026-10-02T23:58:08.651126+00:00 certfr-2026-avi-0567 https://cve.radiocsirt.org/vuln/euvd-2026-317274 EUVD-2026-317274 2026-10-02T23:58:08.651169+00:00 EUVD-2026-317274 https://cve.radiocsirt.org/vuln/fkie_cve-2026-40133 fkie_cve-2026-40133 2026-10-02T23:58:08.651185+00:00

Due to missing authorization check in SAP S/4HANA Condition Maintenance, an authenticated attacker could gain unauthorized access to view and modify condition table records, resulting in low impact on the confidentiality and integrity of the data. Additionally, this vulnerability may prevent the legitimate user from accessing the records, causing low impact on application availability.

 https://cve.radiocsirt.org/vuln/ghsa-gqmf-q62p-q4q6 GHSA-gqmf-q62p-q4q6 2026-10-02T23:58:08.651250+00:00

Due to missing authorization check in SAP S/4HANA Condition Maintenance, an authenticated attacker could gain unauthorized access to view and modify condition table records, resulting in low impact on the confidentiality and integrity of the data. Additionally, this vulnerability may prevent the legitimate user from accessing the records, causing low impact on application availability.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0140 NCSC-2026-0140 — Kwetsbaarheden verholpen in diverse SAP-producten 2026-10-02T23:58:08.651272+00:00 NCSC-2026-0140 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1466 WID-SEC-W-2026-1466 — SAP Patchday Mai 2026: Mehrere Schwachstellen 2026-10-02T23:58:08.651309+00:00

Ein Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen oder andere nicht näher spezifizierte Auswirkungen zu erzielen.