[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fKvZTzCjHaZ_JxdWE9SV3es0iTLqFyj9t2qv9MYSAMxU":3},{"article":4,"iocs":52,"watch_terms":69,"solutions":70,"lesson":156},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"bfb5465c-052b-4ec4-8c49-cfcefb3543fb","SAP warns of maximum severity OAuth2 SSRF security flaw","sap-warns-of-maximum-severity-oauth2-ssrf-security-flaw-3b61a6","SAP has addressed 20 security flaws across multiple products in its October 2026 security updates, including a maximum-severity vulnerability in the Cloud SDK for Python. [...]","SAP released security updates addressing 20 vulnerabilities across multiple products in October 2026, including CVE-2026-89111, a maximum-severity OAuth2 Server-Side Request Forgery (SSRF) flaw in the Cloud SDK for Python that allows unauthenticated remote attackers to steal credentials by manipulating the tenant_subdomain parameter. The company also patched critical flaws in SAP NetWeaver Visual Composer (CVE-2026-89110) and SAP Manufacturing Integration and Intelligence (CVE-2026-89108). CISA has tracked 14 SAP vulnerabilities as actively exploited since 2021, including three used in ransomware campaigns.","SAP patches maximum-severity OAuth2 SSRF in Cloud SDK for Python; 20 flaws addressed in October update.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fsap-warns-of-maximum-severity-oauth2-ssrf-security-flaw\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F07\u002F14\u002FSAP.jpg","2026-10-13T13:51:02+00:00","2026-10-13T14:00:05.399305+00:00",9,[17,20,23,25,27,29],{"name":18,"type":19},"SAP","vendor",{"name":21,"type":22},"SAP Cloud SDK for Python","product",{"name":24,"type":22},"SAP Business Technology Platform (BTP)",{"name":26,"type":22},"SAP NetWeaver Visual Composer",{"name":28,"type":22},"SAP Manufacturing Integration and Intelligence",{"name":30,"type":22},"SAP Commerce Cloud","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":31,"icon":33,"name":34,"slug":35},null,"Vulnerabilities","vulnerabilities",[37,42,47],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":43},{"id":44,"icon":33,"name":45,"slug":46},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":48},{"id":49,"icon":33,"name":50,"slug":51},"574f766a-fb3f-487c-8d2c-0720ae75471b","Zero-day","zero-day",[53,57,60,63,66],{"type":54,"value":55,"context":56},"cve","CVE-2026-89111","Maximum-severity OAuth2 SSRF in SAP Cloud SDK for Python allowing credential exfiltration",{"type":54,"value":58,"context":59},"CVE-2026-89110","Critical broken access control in SAP NetWeaver Visual Composer",{"type":54,"value":61,"context":62},"CVE-2026-89108","Critical privilege escalation in SAP Manufacturing Integration and Intelligence",{"type":54,"value":64,"context":65},"CVE-2026-58231","Maximum-severity flaw in SAP Commerce Cloud, actively exploited in August 2026",{"type":54,"value":67,"context":68},"CVE-2026-44756","Memory corruption (OVERPASS) in SAP Kernel; 10,000+ Internet-facing systems potentially exposed",[18,21,24],{"controls":71,"vendors":155},[72,101,130],{"slug":73,"name":74,"problem":75,"products":76},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[77,85,93],{"vendor_slug":78,"vendor_name":79,"vendor_logo":80,"product_slug":81,"product_name":82,"url":83,"description":84},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":86,"vendor_name":87,"vendor_logo":88,"product_slug":89,"product_name":90,"url":91,"description":92},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":94,"vendor_name":95,"vendor_logo":96,"product_slug":97,"product_name":98,"url":99,"description":100},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"slug":102,"name":103,"problem":104,"products":105},"attack-surface-management","External attack surface management (EASM)","You find your forgotten internet-facing systems before attackers do.",[106,114,122],{"vendor_slug":107,"vendor_name":108,"vendor_logo":109,"product_slug":110,"product_name":111,"url":112,"description":113},"detectify","Detectify","\u002Fvendor-logos\u002Fdetectify.png","surface-monitoring","Detectify Surface Monitoring","https:\u002F\u002Fdetectify.com\u002Fproduct\u002Fsurface-monitoring","Continuous discovery and testing of internet-facing subdomains and services.",{"vendor_slug":115,"vendor_name":116,"vendor_logo":117,"product_slug":118,"product_name":119,"url":120,"description":121},"outpost24","Outpost24","\u002Fvendor-logos\u002Foutpost24.png","outpost24-easm","Outpost24 EASM","https:\u002F\u002Foutpost24.com\u002Fproducts\u002Fexternal-attack-surface-management\u002F","Discovery and risk assessment of internet-facing assets.",{"vendor_slug":123,"vendor_name":124,"vendor_logo":125,"product_slug":126,"product_name":127,"url":128,"description":129},"watchtowr","watchTowr","\u002Fvendor-logos\u002Fwatchtowr.png","watchtowr-platform","watchTowr Platform","https:\u002F\u002Fwatchtowr.com\u002Fplatform\u002F","Continuous discovery of internet-facing assets, with automated testing for exploitable vulnerabilities.",{"slug":131,"name":132,"problem":133,"products":134},"patch-management","Automated patch management","Known holes get closed in days, not months.",[135,139,147],{"vendor_slug":78,"vendor_name":79,"vendor_logo":80,"product_slug":131,"product_name":136,"url":137,"description":138},"Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":140,"vendor_name":141,"vendor_logo":142,"product_slug":143,"product_name":144,"url":145,"description":146},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":148,"vendor_name":149,"vendor_logo":150,"product_slug":151,"product_name":152,"url":153,"description":154},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",[],{"slug":157,"title":158,"body":159,"framework_refs":160,"framework_notes":172},"maximum-severity-sap-oauth2-ssrf-flaw-enables-unauthenticated-credential-theft","Maximum-Severity SAP OAuth2 SSRF Flaw Enables Unauthenticated Credential Theft","A maximum-severity Server-Side Request Forgery (SSRF) vulnerability in SAP's Cloud SDK for Python allows unauthenticated remote attackers to manipulate the tenant_subdomain parameter to forge requests and steal credentials — requiring zero authentication to exploit. This flaw exemplifies how unvalidated input in authentication-adjacent components can completely undermine identity security controls. The risk is compounded by the fact that CISA has tracked 14 SAP vulnerabilities actively exploited in the wild since 2021, including three tied to ransomware campaigns, demonstrating that SAP environments are high-value, persistent targets. Organizations running SAP Cloud SDK, NetWeaver, or Manufacturing Intelligence platforms must treat October 2026 patches as emergency-priority given the maximum CVSS severity and proven attacker interest.",[161,162,163,164,165,166,167,168,169,170,171],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","NIST SP 800-53 SI-2: Flaw Remediation","NIST SP 800-53 SI-10: Information Input Validation","NIST SP 800-53 AC-17: Remote Access","NIST CSF ID.RA-1: Asset Vulnerabilities Identified","NIST CSF RS.MI-3: Newly Identified Vulnerabilities Mitigated","OWASP SSRF Prevention Cheat Sheet","CISA KEV Catalog Directive (BOD 22-01)","ITIL Change Management: Emergency Change Procedures","SAP Security Patch Day Advisory Process",{}]