SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft

vulnerability

SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft

SAP has disclosed a critical Server-Side Request Forgery (SSRF) vulnerability in its Cloud SDK for Python. The vulnerability exists in several SDK versions and has been addressed in later releases, but applications using…

The Hacker News · 1d ago HighCVSS 10.0

CVE-2026-89111 ssrf oauth2 python

vulnerability

SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities

SAP released 22 security notes, including four critical vulnerabilities, addressing issues in NetWeaver, S/4HANA, and Cloud SDK for Python.

SecurityWeek · 13h ago HighCVSS 10.0

CVE-2026-89111 CVE-2026-89110 CVE-2026-89107 sap vulnerability oauth2

news.mlab.sh

SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft

SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft

SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities