https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 00:56:03 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1134 certfr-2026-avi-1134 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1134 https://cve.radiocsirt.org/vuln/euvd-2026-364881 EUVD-2026-364881 https://cve.radiocsirt.org/vuln/euvd-2026-364881 https://cve.radiocsirt.org/vuln/fkie_cve-2026-76969 <p>@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applications with extensibility enabled. An unauthenticated attacker could send specially crafted requests to obtain sensitive credentials and abuse them to replace or delete tenant data. Successful exploitation can result in a high impact on availability and integrity of the application. There may also be partial impact to the confidentiality of business data.</p> <p>@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applications with extensibility enabled. An unauthenticated attacker could send specially crafted requests to obtain sensitive credentials and abuse them to replace or delete tenant data. Successful exploitation can result in a high impact on availability and integrity of the application. There may also be partial impact to the confidentiality of business data.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-76969 https://cve.radiocsirt.org/vuln/ghsa-955m-rr6m-2f9v <p><strong>Affected:</strong> npm: @sap/cds-mtxs</p> <p>@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applications with extensibility enabled. An unauthenticated attacker could send specially crafted requests to obtain sensitive credentials and abuse them to replace or delete tenant data. Successful exploitation can result in a high impact on availability and integrity of the application. There may also be partial impact to the confidentiality of business data.</p> <p><strong>Affected:</strong> npm: @sap/cds-mtxs</p> <p>@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applications with extensibility enabled. An unauthenticated attacker could send specially crafted requests to obtain sensitive credentials and abuse them to replace or delete tenant data. Successful exploitation can result in a high impact on availability and integrity of the application. There may also be partial impact to the confidentiality of business data.</p> https://cve.radiocsirt.org/vuln/ghsa-955m-rr6m-2f9v https://cve.radiocsirt.org/vuln/ncsc-2026-0356 NCSC-2026-0356 https://cve.radiocsirt.org/vuln/ncsc-2026-0356 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3220 <p>Ein Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Berechtigungen zu erweitern, vertrauliche Informationen offenzulegen oder zu manipulieren, SQL-Injection-Angriffe durchzuführen oder einen Denial-of-Service-Zustand zu verursachen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Berechtigungen zu erweitern, vertrauliche Informationen offenzulegen oder zu manipulieren, SQL-Injection-Angriffe durchzuführen oder einen Denial-of-Service-Zustand zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3220