| CVE-2026-109795 | CRITICAL | 9.9 | SAP NetWeaver does not perform necessary authorization checks and lacks sufficient input validation in certain… | 2026-11-10 |
| CVE-2026-109796 | MEDIUM | 4.3 | SAP NetWeaver Application Server ABAP and ABAP Platform does not properly initialize memory in certain interna… | 2026-11-10 |
| CVE-2026-109797 | HIGH | 7.1 | In SAP/astonish, an authenticated user could potentially identify and operate on another team�s sandbox contai… | 2026-11-10 |
| CVE-2026-109798 | CRITICAL | 9.1 | SAP BusinessObjects Business Intelligence Platform (Web Intelligence) does not properly restrict external enti… | 2026-11-10 |
| CVE-2026-109799 | HIGH | 7.5 | The SAP Cloud SDK for Python contains an improper cryptographic signature verification vulnerability (CWE-347)… | 2026-11-10 |
| CVE-2026-109800 | HIGH | 7.7 | SAP Web Dispatcher does not sufficiently validate certain inputs during processing, which could lead to memory… | 2026-11-10 |
| CVE-2026-109801 | MEDIUM | 6.5 | SAP NetWeaver Application Server Java (NWDI Cockpit)� does not perform sufficient authorization checks for cer… | 2026-11-10 |
| CVE-2026-109802 | MEDIUM | 6.5 | SAP NetWeaver Application Server for ABAP does not properly validate certain input values. An authenticated us… | 2026-11-10 |
| CVE-2026-109803 | CRITICAL | 9.9 | SAP NetWeaver Knowledge Management (XML Forms) does not sufficiently restrict the selection of XSL transformat… | 2026-11-10 |
| CVE-2026-109804 | HIGH | 7.5 | SAP Message Server does not properly handle certain malformed requests, which could be leveraged by an unauthe… | 2026-11-10 |
| CVE-2026-109805 | MEDIUM | 6.4 | Due to a weak HMAC cryptography calculation when receiving an RFC callback in SAP NetWeaver and ABAP Platform … | 2026-11-10 |
| CVE-2026-109806 | HIGH | 7.5 | SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming … | 2026-11-10 |
| CVE-2026-109807 | HIGH | 7.5 | SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming … | 2026-11-10 |
| CVE-2026-109808 | LOW | 3.1 | Due to a missing authorization check in certain remote-enabled functionality, SAP Solution Tools Plug-In allow… | 2026-11-10 |
| CVE-2026-109809 | MEDIUM | 6.5 | SAP NetWeaver Application Server Java (NWDI Cockpit) does not perform sufficient authorization checks for cert… | 2026-11-10 |
| CVE-2026-109810 | MEDIUM | 6.1 | SAP NetWeaver Application Server Java (Web Dynpro Java) does not sufficiently validate certain request paramet… | 2026-11-10 |
| CVE-2026-109811 | MEDIUM | 6.5 | An internal ABAP HTTP component in SAP NetWeaver and ABAP Platform (Application Server ABAP) has SSRF vulnerab… | 2026-11-10 |
| CVE-2026-120008 | HIGH | 8.2 | SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming … | 2026-11-10 |
| CVE-2026-120009 | HIGH | 7.2 | SAP ABAP Developer Tools (AMDP Data Preview) does not perform sufficient validation and authorization checks w… | 2026-11-10 |
| CVE-2026-120010 | HIGH | 7.5 | SAP NetWeaver Application Server (SAP Message Server) does not properly size memory allocations when handling … | 2026-11-10 |
| CVE-2026-120014 | HIGH | 7.6 | SAP HANA XSA Web Dispatcher does not perform sufficient request validation in certain administrative functiona… | 2026-11-10 |
| CVE-2026-120015 | HIGH | 7.5 | SAP Host Agent does not sufficiently validate certain inputs. Under certain condition, an attacker with low pr… | 2026-11-10 |
| CVE-2026-120016 | MEDIUM | 6.1 | SAP NetWeaver Visual Composer does not perform sufficient input validation and output encoding on certain requ… | 2026-11-10 |
| CVE-2026-120017 | CRITICAL | 10.0 | SAP NetWeaver AS ABAP and ABAP Platform does not perform sufficient verification of incoming authentication as… | 2026-11-10 |
| CVE-2026-123424 | NA | N/A | Rejected reason: This CVE ID has been rejected as a duplicate.… | 2026-11-10 |
| CVE-2026-123425 | NA | N/A | Rejected reason: This CVE ID has been rejected as a duplicate.… | 2026-11-10 |
| CVE-2026-123426 | NA | N/A | Rejected reason: This CVE ID has been rejected as a duplicate.… | 2026-11-10 |
| CVE-2026-123427 | NA | N/A | Rejected reason: This CVE ID has been rejected as a duplicate.… | 2026-11-10 |
| CVE-2026-123429 | NA | N/A | Rejected reason: This CVE ID has been rejected as a duplicate.… | 2026-11-10 |
| CVE-2026-123430 | NA | N/A | Rejected reason: This CVE ID has been rejected as a duplicate.… | 2026-11-10 |
| CVE-2026-123431 | NA | N/A | Rejected reason: This CVE ID has been rejected as a duplicate.… | 2026-11-10 |
| CVE-2026-123432 | NA | N/A | Rejected reason: This CVE ID has been rejected as a duplicate.… | 2026-11-10 |
| CVE-2026-123435 | NA | N/A | Rejected reason: This CVE ID has been rejected as a duplicate.… | 2026-11-10 |
| CVE-2026-123437 | NA | N/A | Rejected reason: This CVE ID has been rejected as a duplicate.… | 2026-11-10 |
| CVE-2026-123438 | NA | N/A | Rejected reason: This CVE ID has been rejected as a duplicate.… | 2026-11-10 |
| CVE-2026-123439 | NA | N/A | Rejected reason: This CVE ID has been rejected as a duplicate.… | 2026-11-10 |
| CVE-2026-124598 | HIGH | 7.5 | An
API key is hardcoded and retrievable from the GV-Face package. Since
Android applications can be reverse en… | 2026-11-10 |
| CVE-2026-124599 | MEDIUM | 6.2 | The RSA cryptographic key material, including a private key and public key, is
embedded within the application… | 2026-11-10 |
| CVE-2026-124600 | NA | N/A | GV-Face transmits sensitive user credentials and
related authentication data over unencrypted HTTP connections… | 2026-11-10 |
| CVE-2026-124601 | MEDIUM | 6.2 | An
API key is hardcoded and retrievable from the GV-Access package. Since
Android applications can be reverse … | 2026-11-10 |
| CVE-2026-124602 | MEDIUM | 6.2 | The RSA cryptographic
key material, including a private key and public key, is embedded within the GV-Access a… | 2026-11-10 |
| CVE-2026-124603 | MEDIUM | 6.2 | An API key is
hardcoded and retrievable from the GV-Cloud application package. Since Android
applications can … | 2026-11-10 |
| CVE-2026-124604 | MEDIUM | 6.2 | The RSA cryptographic key
material, including a private key and public key, is embedded within the GV-Cloud ap… | 2026-11-10 |
| CVE-2026-125079 | MEDIUM | 5.3 | A vulnerability was determined in D-Link DCS-6501LH 3.03.02. This impacts the function pf_get_onvif_user_pwd/m… | 2026-11-10 |
| CVE-2026-125082 | LOW | 3.5 | A security flaw has been discovered in sunkaifei FlyCMS up to e71738e0cfb7ffd48c2ce74242a2dbb43f84f25a. Affect… | 2026-11-10 |
| CVE-2026-125086 | CRITICAL | 10.0 | A vulnerability has been found in D-Link M60 1.12.B01. Impacted is the function system of the file /etc/emDaem… | 2026-11-10 |
| CVE-2026-125087 | HIGH | 7.3 | A vulnerability was found in Michael-A-Kuykendall Shimmy up to 2.6.4. The affected element is an unknown funct… | 2026-11-10 |
| CVE-2026-76964 | CRITICAL | 10.0 | SAP NetWeaver Application Server ABAP does not sufficiently validate certain network input processed by an int… | 2026-11-10 |
| CVE-2026-76965 | CRITICAL | 9.9 | SAP NetWeaver Application Server ABAP and ABAP Platform does not perform necessary authorization checks for ce… | 2026-11-10 |
| CVE-2026-76966 | HIGH | 8.9 | Due to improper RFC protocol validation in the SAP Kernel used by the Application Server ABAP of SAP NetWeaver… | 2026-11-10 |