SAP warnt vor schwerwiegender OAuth2 SSRF-Sicherheitslücke
Teaser aus der Quelle
SAP hat in seinen Sicherheitsupdates für Oktober 2026 20 Sicherheitslücken in mehreren Produkten behoben, darunter eine kritische Schwachstelle in der Cloud SDK for Python. Unternehmen sollten die Updates umgehend anwenden, um das Risiko von Angriffen zu minimieren.
Dies ist ein Anriss aus dem RSS-Feed. Den vollständigen Artikel lesen Sie beim Original.
Artikel bei BleepingComputer lesenMehr zu severity
Weitere Advisories
- Ohne Bewertungosv:CVE-2026-111045CLI Bridge: High-severity sandbox escape via dangling symlink
- MittelCVE-2026-87564Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)
- HochCVE-2026-87587Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
- HochCVE-2026-87612Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
- HochCVE-2026-87625Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)
- HochCVE-2026-87601Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
- MittelCVE-2024-7318Keycloak-core: one time passcode (otp) is valid longer than expiration timeseverity
- Ohne Bewertungosv:CVE-2026-19434Stored Cross-site Scripting in Pentestify finding severity field
Weitere News-Einträge
- High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7NewsSecurityWeek
- Critical PHP Vulnerability (CVE-2026-109618, CVE-2026-109619) [infocon yellow], (Wed, Oct 21st)NewsSANS ISC Diary
- ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access TrojanNewsThe Hacker News
- F5 releases out-of-band patches for critical NGINX vulnerabilitiesNewsBleepingComputer
- Critical BlockStrap flaw lets hackers run code on Magento serversNewsBleepingComputer
- Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG ProcessingNewsThe Hacker News
- Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active ExploitationNewsThe Hacker News
- Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacksNewsBleepingComputer
ID