Back to the CVE list
CVE-2026-89117

Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal

CVSS score

6.1

EPSS probability

%0.2

Risk score

0.0

Published

6 d ago

Related Security News

Articles and analysis bulletins in which the press and security publications have covered this vulnerability:

The Cyber Express14.10.2026

SAP Patches Critical CVSS 10.0 Flaw in Cloud SDK for Python

SAP released its October 2026 security patch on Tuesday, October 13, delivering 22 new and updated security notes. Four of them address critical-severity vulnerabilities. The most severe is CVE-2026-89111, a maximum-rated flaw in the Cloud SDK for Python. Several of the bugs could allow attackers to invoke internal operations or execute code, which could lead to complete compromise of affected systems. SAP's patch day summary breaks the release down into 16 new security notes, four GitHub security advisories, and two updates to previously released notes. The company recommends that customers v

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-89117"