https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T21:43:14.428752+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-01625 bdu:2026-01625 2026-10-04T21:43:14.519964+00:00 bdu:2026-01625 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0141 certfr-2026-avi-0141 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… 2026-10-04T21:43:14.520027+00:00 certfr-2026-avi-0141 https://cve.radiocsirt.org/vuln/euvd-2026-271018 EUVD-2026-271018 2026-10-04T21:43:14.520062+00:00 EUVD-2026-271018 https://cve.radiocsirt.org/vuln/fkie_cve-2026-0488 fkie_cve-2026-0488 2026-10-04T21:43:14.520088+00:00

An authenticated attacker in SAP CRM and SAP S/4HANA (Scripting Editor) could exploit a flaw in a generic function module call and execute unauthorized critical functionalities, which includes the ability to execute an arbitrary SQL statement. This leads to a full database compromise with high impact on confidentiality, integrity, and availability.

 https://cve.radiocsirt.org/vuln/ghsa-rj9r-f39x-h33w GHSA-rj9r-f39x-h33w 2026-10-04T21:43:14.520133+00:00

An authenticated attacker in SAP CRM and SAP S/4HANA (Scripting Editor) could exploit a flaw in a generic function module call and execute unauthorized critical functionalities, which includes the ability to execute an arbitrary SQL statement. This leads to a full database compromise with high impact on confidentiality, integrity, and availability.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0052 NCSC-2026-0052 — Kwetsbaarheden verholpen in SAP producten 2026-10-04T21:43:14.520161+00:00 NCSC-2026-0052 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0354 WID-SEC-W-2026-0354 — SAP Patchday Februar 2026: Mehrere Schwachstellen 2026-10-04T21:43:14.520257+00:00

Ein Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder andere, nicht näher spezifizierte Angriffe durchzuführen.