Product
SAP Gateway
- First Reported
- Nov 10, 2026
- Latest Reported
- Nov 10, 2026
Reported Context (2)
- The flaw in SAP Gateway, which connects the server to other SAP systems and programs, could allow an attacker to impersonate one of the system's own servers and take unauthorized actions. SAP Fixes Four Maximum-Severity Flaws, Including Two That Could Enable Remote Code Execution
- The other two maximum severity vulnerabilities stem from a broken access control weakness (CVE-2026-89103) in SAP Gateway and a memory corruption issue (CVE-2026-89126) in SAP Web Dispatcher. SAP Fixes Four Maximum-Severity Flaws in November Security Update
CVE (8)
MITRE ATT&CK (1)
Vendors (1)
Products (8)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.