CVE-2026-89103
SAP_SE SAP Gateway
Prioridad media: es grave, pero no se conoce explotación
SAP Gateway activates the default Access Control List with high privileges allowing categorization of external attacker as internal application server. As a result an unauthenticated attacker with network access to the SAP Gateway could exploit this weakness to potentially perform unauthorized actions within the application environment, resulting in a high impact on the confidentiality, integrity, and availability of the affected system.
En las noticias
- Boletín de seguridad de SAP de noviembre de 2026 · INCIBE-CERT