Product
SAP NetWeaver Visual Composer
- First Reported
- Oct 13, 2026
- Latest Reported
- Oct 21, 2026
Reported Context (4)
- vulnerabilities in SAP NetWeaver Visual Composer (CVE-2025-31324). GuidePoint Report Finds Ransomware Victim Claims Rose 58% in 2025
- CVE-2025-31324 in SAP NetWeaver Visual Composer Proxyjacking Campaign Hijacks 143 Devices to Resell Victims’ Bandwidth
- Next in line is CVE-2026-89110 (CVSS score of 9.9/10), a broken access control in certain portal functionality of NetWeaver Visual Composer. SAP Patches Critical NetWeaver, S/4HANA and Other Vulnerabilities
- Today, SAP also addressed CVE-2026-89110, a critical broken access control vulnerability in the SAP NetWeaver Visual Composer that could let remote attackers with limited privileges fully compromise vulnerable systems. SAP Patches Maximum-Severity OAuth2 SSRF Flaw in Python SDK
CVE (18)
Malware (8)
People (2)
Threat Actors (9)
MITRE ATT&CK (8)
Vendors (7)
Products (21)
Tools (3)
Industries (8)
Countries (11)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.