cveboard RSS feed

CVE-2026-89111

Critical

SAP_SE SAP Cloud

  • SAP_SE SAP Cloud
  • Critical
  • CVSS 10.0
  • EPSS 0.27%
  • No fixed version listed

What to do

No fixed version listed

Plain text

Affected products

ProductAffectedFixed in
SAP_SE SAP Cloudsap-cloud-sdk < 0.45.2None listed

Scores and signals

Exploitation
No known exploitation
Severity
Critical, CVSS 10.0 (v3.1, scored by sap)
EPSS
0.27% chance of exploitation in the next 30 days (EPSS from FIRST, as of Oct 24, 2026)
CISA's SSVC decision points
Exploitation: none. Automatable: yes. Technical impact: total. As of Oct 14, 2026.
Weakness
CWE-918: Server-Side Request Forgery
Vendor
SAP_SE, SAP Cloud

Timeline

  1. First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.

Sources

All live incidents