SAP Manufacturing Integration and Intelligence CVE-2026-89108 patch release
Security Patch Release
Summary
Hide ▲
Show ▼
SAP's October 2026 security updates now patch CVE-2026-89108 in SAP Manufacturing Integration and Intelligence, closing a flaw that could let an attacker with administrator privileges gain admin control over the underlying system. The weakness involved provisioning an elevated-privilege account on the underlying Java app. The release is part of SAP's broader update cycle covering 20 flaws across multiple products.
Related Happenings
SAP security patch release for CVE-2026-89111
Security Patch Release
H score38
First: 13.10.2026 16:51
Last: 13.10.2026 16:51
Sources 1
How related:
SAP has addressed 20 security flaws across multiple products in its October 2026 security updates, including a maximum-severity vulnerability in the Cloud SDK for Python.
About this happening:
SAP's October 2026 security updates patch CVE-2026-89111 in SAP Cloud SDK for Python, closing a maximum-severity OAuth2 SSRF flaw. The issue affects multi-te...
SAP security patch release for CVE-2026-89111
Security Patch ReleaseHow related: SAP has addressed 20 security flaws across multiple products in its October 2026 security updates, including a maximum-severity vulnerability in the Cloud SDK for Python.
About this happening: SAP's October 2026 security updates patch CVE-2026-89111 in SAP Cloud SDK for Python, closing a maximum-severity OAuth2 SSRF flaw. The issue affects multi-te...
SAP NetWeaver Visual Composer security update (CVE-2026-89110)
Security Patch Release
H score33
First: 13.10.2026 16:51
Last: 13.10.2026 16:51
Sources 1
How related:
Today, SAP also addressed CVE-2026-89110, a critical broken access control vulnerability in the SAP NetWeaver Visual Composer that could let remote attackers with limited privileges fully compromise vulnerable systems.
About this happening:
SAP's October 2026 security updates patched CVE-2026-89110 in SAP NetWeaver Visual Composer, closing a broken access control flaw that could let remote attackers...
SAP NetWeaver Visual Composer security update (CVE-2026-89110)
Security Patch ReleaseHow related: Today, SAP also addressed CVE-2026-89110, a critical broken access control vulnerability in the SAP NetWeaver Visual Composer that could let remote attackers with limited privileges fully compromise vulnerable systems.
About this happening: SAP's October 2026 security updates patched CVE-2026-89110 in SAP NetWeaver Visual Composer, closing a broken access control flaw that could let remote attackers...
SAP security patch release for CVE-2026-44756
Security Patch Release
H score45
First: 09.09.2026 09:25
Last: 09.09.2026 09:25
Sources 1
About this happening:
SAP released security updates for multiple critical vulnerabilities, including CVE-2026-44756, a CVSS 10.0 flaw in SAP Extended Passport (EPP) Processing t...
SAP security patch release for CVE-2026-44756
Security Patch ReleaseAbout this happening: SAP released security updates for multiple critical vulnerabilities, including CVE-2026-44756, a CVSS 10.0 flaw in SAP Extended Passport (EPP) Processing t...
SAP Commerce Cloud (Data Hub Adapter) CVE-2026-58231 patch release
Security Patch Release
H score44
First: 12.08.2026 10:31
Last: 12.08.2026 10:31
Sources 1
About this happening:
SAP Commerce Cloud (Data Hub Adapter) CVE-2026-58231 is a maximum-severity CVSS 10.0 vulnerability that can let an unauthenticated attacker abuse a default authent...
SAP Commerce Cloud (Data Hub Adapter) CVE-2026-58231 patch release
Security Patch ReleaseAbout this happening: SAP Commerce Cloud (Data Hub Adapter) CVE-2026-58231 is a maximum-severity CVSS 10.0 vulnerability that can let an unauthenticated attacker abuse a default authent...
SAP July 2026 security updates
Security Patch Release
H score31
First: 14.07.2026 14:42
Last: 14.07.2026 14:42
Sources 1
About this happening:
SAP's July 2026 security updates address 16 vulnerabilities across NetWeaver, Commerce Cloud, and AppRouter, including three critical flaws. The release closes a *...
SAP July 2026 security updates
Security Patch ReleaseAbout this happening: SAP's July 2026 security updates address 16 vulnerabilities across NetWeaver, Commerce Cloud, and AppRouter, including three critical flaws. The release closes a *...
Timeline
-
13.10.2026 16:51 2 articles · 3h ago
SAP patches CVE-2026-89108 in SAP Manufacturing Integration and Intelligence
Mitigation Patch UpdateSAP's October 2026 security updates patched CVE-2026-89108 in SAP Manufacturing Integration and Intelligence, closing a critical flaw that could let threat actors with administrator privileges gain admin control over the underlying system by provisioning an elevated-privilege account on the underlying Java app.
Show sources
- SAP warns of maximum severity OAuth2 SSRF security flaw — www.bleepingcomputer.com — 13.10.2026 16:51
- SAP warns of maximum severity OAuth2 SSRF security flaw — www.bleepingcomputer.com — 13.10.2026 16:51