SAP NetWeaver Visual Composer security update (CVE-2026-89110)
Security Patch Release
Summary
Hide ▲
Show ▼
SAP's October 2026 security updates patched CVE-2026-89110 in SAP NetWeaver Visual Composer, closing a broken access control flaw that could let remote attackers with limited privileges fully compromise vulnerable systems. The fix removes a path to full system compromise in affected deployments. It is part of SAP's broader 20-flaw update cycle for the month.
Related Happenings
SAP security patch release for CVE-2026-89111
Security Patch Release
H score38
First: 13.10.2026 16:51
Last: 13.10.2026 16:51
Sources 1
How related:
SAP has addressed 20 security flaws across multiple products in its October 2026 security updates, including a maximum-severity vulnerability in the Cloud SDK for Python.
About this happening:
SAP's October 2026 security updates patch CVE-2026-89111 in SAP Cloud SDK for Python, closing a maximum-severity OAuth2 SSRF flaw. The issue affects multi-te...
SAP security patch release for CVE-2026-89111
Security Patch ReleaseHow related: SAP has addressed 20 security flaws across multiple products in its October 2026 security updates, including a maximum-severity vulnerability in the Cloud SDK for Python.
About this happening: SAP's October 2026 security updates patch CVE-2026-89111 in SAP Cloud SDK for Python, closing a maximum-severity OAuth2 SSRF flaw. The issue affects multi-te...
SAP Manufacturing Integration and Intelligence CVE-2026-89108 patch release
Security Patch Release
H score22
First: 13.10.2026 16:51
Last: 13.10.2026 16:51
Sources 1
How related:
Another critical flaw patched today in SAP Manufacturing Integration and Intelligence (tracked as CVE-2026-89108) lets threat actors with administrator privileges gain admin control over the underlying system by provisioning an elevated-privilege account on the underlying Java app.
About this happening:
SAP's October 2026 security updates now patch CVE-2026-89108 in SAP Manufacturing Integration and Intelligence, closing a flaw that could let an attacker with admini...
SAP Manufacturing Integration and Intelligence CVE-2026-89108 patch release
Security Patch ReleaseHow related: Another critical flaw patched today in SAP Manufacturing Integration and Intelligence (tracked as CVE-2026-89108) lets threat actors with administrator privileges gain admin control over the underlying system by provisioning an elevated-privilege account on the underlying Java app.
About this happening: SAP's October 2026 security updates now patch CVE-2026-89108 in SAP Manufacturing Integration and Intelligence, closing a flaw that could let an attacker with admini...
WordPress security patch release for CVE-2026-87902
Security Patch Release
H score47
First: 23.09.2026 21:31
Last: 23.09.2026 21:31
Sources 1
About this happening:
WordPress released version 7.1.2 to fix CVE-2026-87902, a critical unauthenticated path traversal flaw that can lead to remote code execution under specific co...
WordPress security patch release for CVE-2026-87902
Security Patch ReleaseAbout this happening: WordPress released version 7.1.2 to fix CVE-2026-87902, a critical unauthenticated path traversal flaw that can lead to remote code execution under specific co...
SAP security patch release for CVE-2026-44756
Security Patch Release
H score45
First: 09.09.2026 09:25
Last: 09.09.2026 09:25
Sources 1
About this happening:
SAP released security updates for multiple critical vulnerabilities, including CVE-2026-44756, a CVSS 10.0 flaw in SAP Extended Passport (EPP) Processing t...
SAP security patch release for CVE-2026-44756
Security Patch ReleaseAbout this happening: SAP released security updates for multiple critical vulnerabilities, including CVE-2026-44756, a CVSS 10.0 flaw in SAP Extended Passport (EPP) Processing t...
SAP Commerce Cloud (Data Hub Adapter) CVE-2026-58231 patch release
Security Patch Release
H score44
First: 12.08.2026 10:31
Last: 12.08.2026 10:31
Sources 1
About this happening:
SAP Commerce Cloud (Data Hub Adapter) CVE-2026-58231 is a maximum-severity CVSS 10.0 vulnerability that can let an unauthenticated attacker abuse a default authent...
SAP Commerce Cloud (Data Hub Adapter) CVE-2026-58231 patch release
Security Patch ReleaseAbout this happening: SAP Commerce Cloud (Data Hub Adapter) CVE-2026-58231 is a maximum-severity CVSS 10.0 vulnerability that can let an unauthenticated attacker abuse a default authent...
Timeline
-
13.10.2026 16:51 2 articles · 3h ago
SAP patches CVE-2026-89110 in NetWeaver Visual Composer
Mitigation Patch UpdateSAP's October 2026 security updates address CVE-2026-89110 in SAP NetWeaver Visual Composer, a critical broken access control flaw that could let remote attackers with limited privileges fully compromise vulnerable systems.
Show sources
- SAP warns of maximum severity OAuth2 SSRF security flaw — www.bleepingcomputer.com — 13.10.2026 16:51
- SAP warns of maximum severity OAuth2 SSRF security flaw — www.bleepingcomputer.com — 13.10.2026 16:51