CVE-2026-89129

Vendor

SAP_SE

Product

SAP NetWeaver AS Java (Web Services)

CVSS v3.1

5.8 AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Weakness

CWE-918

Exposure class

Web platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 29
   CVE NVD 3h ago

   Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP NetWeaver AS Java (Web Services), an unauthenticated attacker could craft a SOAP…

   Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP NetWeaver AS Java (Web Services), an unauthenticated attacker could craft a SOAP request that causes the server to return a SOAP fault to a URL under the attacker�s…

   CVSS 5.8 CVE-2026-89129 SAP_SE