Tag: cve 2026 89111

1 article

Laptop on a minimalist desk in front of a blurred cityscape through a large window.

SAP Discloses Maximum-Severity OAuth2 SSRF Flaw in Cloud SDK

SAP has patched a critical OAuth2 vulnerability in its Cloud SDK for Python, which could allow attackers to steal sensitive credentials by redirecting token requests to a server of their choice. This flaw, tracked as CVE-2026-89111, poses a major threat to multi-tenant BTP applications.

Analyst 207Oct 13, 2026