https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:20:10 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0141 certfr-2026-avi-0141 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0141 https://cve.radiocsirt.org/vuln/euvd-2026-267840 EUVD-2026-267840 https://cve.radiocsirt.org/vuln/euvd-2026-267840 https://cve.radiocsirt.org/vuln/fkie_cve-2026-23686 <p>Due to a CRLF Injection vulnerability in SAP NetWeaver Application Server Java, an authenticated attacker with administrative access could submit specially crafted content to the application. If processed by the application, this content enables injection of untrusted entries into generated configuration, allowing manipulation of application-controlled settings. Successful exploitation leads to a low impact on integrity, while confidentiality and availability remain unaffected.</p> <p>Due to a CRLF Injection vulnerability in SAP NetWeaver Application Server Java, an authenticated attacker with administrative access could submit specially crafted content to the application. If processed by the application, this content enables injection of untrusted entries into generated configuration, allowing manipulation of application-controlled settings. Successful exploitation leads to a low impact on integrity, while confidentiality and availability remain unaffected.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-23686 https://cve.radiocsirt.org/vuln/ghsa-9c7v-cw9q-4fpc <p>Due to a CRLF Injection vulnerability in SAP NetWeaver Application Server Java, an authenticated attacker with administrative access could submit specially crafted content to the application. If processed by the application, this content enables injection of untrusted entries into generated configuration, allowing manipulation of application-controlled settings. Successful exploitation leads to a low impact on integrity, while confidentiality and availability remain unaffected.</p> <p>Due to a CRLF Injection vulnerability in SAP NetWeaver Application Server Java, an authenticated attacker with administrative access could submit specially crafted content to the application. If processed by the application, this content enables injection of untrusted entries into generated configuration, allowing manipulation of application-controlled settings. Successful exploitation leads to a low impact on integrity, while confidentiality and availability remain unaffected.</p> https://cve.radiocsirt.org/vuln/ghsa-9c7v-cw9q-4fpc https://cve.radiocsirt.org/vuln/ncsc-2026-0052 NCSC-2026-0052 https://cve.radiocsirt.org/vuln/ncsc-2026-0052 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0354 <p>Ein Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder andere, nicht näher spezifizierte Angriffe durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder andere, nicht näher spezifizierte Angriffe durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0354