Product
SAP Business Technology Platform (BTP)
- First Reported
- Oct 13, 2026
- Latest Reported
- Oct 14, 2026
Reported Context (3)
- At the top of the list is CVE-2026-89111 (CVSS score of 10/10), an OAuth2 SSRF vulnerability in Cloud SDK for Python that impacts multi-tenant BTP applications. SAP Patches Critical NetWeaver, S/4HANA and Other Vulnerabilities
- said in a security advisory on October 13. The flaw affects multi-tenant applications on SAP Business Technology Platform (BTP) that use the SDK, SAP's official Python client for BTP services. An attacker must be able SAP Cloud SDK for Python Flaw Could Expose OAuth2 Credentials
- The SAP Python SDK is the official programmatic toolkit for developing AI agents and Python applications on the company's SAP Business Technology Platform (BTP) services. SAP Patches Maximum-Severity OAuth2 SSRF Flaw in Python SDK
CVE (6)
People (2)
Vendors (1)
Products (9)
Industries (1)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.