https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T07:45:31.941410+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-26660 CVE-2025-26660 — Broken Access Control in SAP Fiori apps (Posting Library) 2026-10-07T07:45:31.958061+00:00

Affected: SAP_SE SAP Fiori apps (Posting Library)

SAP Fiori applications using the posting library fail to properly configure security settings during the setup process, leaving them at default or inadequately defined. This vulnerability allows an attacker with low privileges to bypass access controls within the application, enabling them to potentially modify data. Confidentiality and Availability are not impacted.