https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T10:41:17.977723+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-1134 certfr-2026-avi-1134 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… 2026-10-02T10:41:17.982475+00:00 certfr-2026-avi-1134 https://cve.radiocsirt.org/vuln/euvd-2026-364880 EUVD-2026-364880 2026-10-02T10:41:17.982523+00:00 EUVD-2026-364880 https://cve.radiocsirt.org/vuln/fkie_cve-2026-76971 fkie_cve-2026-76971 2026-10-02T10:41:17.982553+00:00

Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could cause the server to initiate arbitrary outbound requests. If processed by the application, this behavior could be combined with XML/XSL processing to enable execution of scripts. Successful exploitation could result in a low impact on the confidentiality, integrity, and availability of the application.

 https://cve.radiocsirt.org/vuln/ghsa-fcc6-f47w-v8rx GHSA-fcc6-f47w-v8rx 2026-10-02T10:41:17.982599+00:00

Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could cause the server to initiate arbitrary outbound requests. If processed by the application, this behavior could be combined with XML/XSL processing to enable execution of scripts. Successful exploitation could result in a low impact on the confidentiality, integrity, and availability of the application.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0356 NCSC-2026-0356 — Kwetsbaarheden verholpen in diverse SAP-producten 2026-10-02T10:41:17.982637+00:00 NCSC-2026-0356 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3220 WID-SEC-W-2026-3220 — SAP Patch Day September 2026: Mehrere Schwachstellen 2026-10-02T10:41:17.982678+00:00

Ein Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Berechtigungen zu erweitern, vertrauliche Informationen offenzulegen oder zu manipulieren, SQL-Injection-Angriffe durchzuführen oder einen Denial-of-Service-Zustand zu verursachen.