SAP warns of maximum severity OAuth2 SSRF security flaw
Teaser from the source
SAP has addressed 20 security flaws across multiple products in its October 2026 security updates, including a maximum-severity vulnerability in the Cloud SDK for Python. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on severity
Other advisories
- Not ratedosv:CVE-2026-111045CLI Bridge: High-severity sandbox escape via dangling symlink
- MediumCVE-2026-87564Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)
- HighCVE-2026-87587Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
- HighCVE-2026-87612Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
- HighCVE-2026-87625Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)
- HighCVE-2026-87601Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
- MediumCVE-2024-7318Keycloak-core: one time passcode (otp) is valid longer than expiration timeseverity
- Not ratedosv:CVE-2026-19434Stored Cross-site Scripting in Pentestify finding severity field
Other news entries
- High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7NewsSecurityWeek
- Critical PHP Vulnerability (CVE-2026-109618, CVE-2026-109619) [infocon yellow], (Wed, Oct 21st)NewsSANS ISC Diary
- ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access TrojanNewsThe Hacker News
- F5 releases out-of-band patches for critical NGINX vulnerabilitiesNewsBleepingComputer
- Critical BlockStrap flaw lets hackers run code on Magento serversNewsBleepingComputer
- Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG ProcessingNewsThe Hacker News
- Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active ExploitationNewsThe Hacker News
- Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacksNewsBleepingComputer
ID