{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/cloud-sdk-for-python/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":10,"id":"CVE-2026-89111"},{"cvss":9.9,"id":"CVE-2026-89110"},{"cvss":9.9,"id":"CVE-2026-89107"},{"cvss":9.1,"id":"CVE-2026-89108"}],"_cs_exploited":true,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["NetWeaver","S/4HANA","Cloud SDK for Python","Manufacturing Integration and Intelligence","Commerce Cloud","ABAP Platform"],"_cs_severities":["high"],"_cs_tags":["vulnerability","enterprise-software","patch-management"],"_cs_type":"threat","_cs_vendors":["SAP"],"content_html":"\u003cp\u003eSAP released security updates on October 14, 2026, resolving 22 security notes, including four critical-severity vulnerabilities. These flaws impact key infrastructure components, including SAP NetWeaver, S/4HANA, and the Cloud SDK for Python. The identified vulnerabilities range from Server-Side Request Forgery (SSRF) and broken access control to arbitrary code injection and missing authorization checks.\u003c/p\u003e\n\u003cp\u003eSpecifically, CVE-2026-89111 allows for OAuth2 token exfiltration via SSRF in Cloud SDK for Python, while CVE-2026-89110 and CVE-2026-89107 enable arbitrary code execution and internal operation invocation in NetWeaver and S/4HANA, respectively. Additionally, CVE-2026-89108 allows unauthorized creation of administrative accounts in Manufacturing Integration and Intelligence. While there is no current evidence of exploitation in the wild, the potential for complete system compromise necessitates immediate patching and configuration auditing.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation of these vulnerabilities could result in the total compromise of SAP environments, including the exfiltration of sensitive credentials, execution of arbitrary ABAP or system-level code, and the creation of unauthorized administrative accounts. Organizations utilizing SAP NetWeaver, S/4HANA, or SAP BTP applications are at risk of data breaches and persistent unauthorized access if these flaws remain unpatched.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePrioritize patching for the four critical vulnerabilities: CVE-2026-89111, CVE-2026-89110, CVE-2026-89107, and CVE-2026-89108.\u003c/li\u003e\n\u003cli\u003eAudit access controls for Fiori Applications to ensure input validation is enforced for all business roles as a mitigation for CVE-2026-89110.\u003c/li\u003e\n\u003cli\u003eReview administrative account creation logs in SAP Manufacturing Integration and Intelligence to identify unauthorized account provisioning (CVE-2026-89108).\u003c/li\u003e\n\u003cli\u003eImplement egress filtering for SAP Cloud SDK implementations to prevent potential token redirection and credential exfiltration related to CVE-2026-89111.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-14T06:22:11Z","date_published":"2026-10-14T06:22:11Z","id":"https://feed.craftedsignal.io/briefs/2026-10-sap-critical-patches/","summary":"SAP has released security updates addressing four critical-severity vulnerabilities, including SSRF, code injection, and authorization bypasses, across multiple enterprise platforms.","title":"Critical Vulnerabilities in SAP NetWeaver and S/4HANA","url":"https://feed.craftedsignal.io/briefs/2026-10-sap-critical-patches/"}],"language":"en","title":"CraftedSignal Threat Feed - Cloud SDK for Python","version":"https://jsonfeed.org/version/1.1"}