CVE-2026-89110 in NetWeaver Visual Composerinformação

Sumário

de MITRE • 13/10/2026

SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal functionality. An attacker with low privileges could invoke internal operations on a preconfigured remote system. Depending on the remote connection configuration, this could lead to a full compromise of the remote system. This results in a high impact on confidentiality, integrity and availability.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Responsável

Sap

Reservar

11/09/2026

Divulgação

13/10/2026

Moderação

aceite

Entrada

VDB-417418

EPSS

0.00000

KEV

não

Atividades

baixo

Fontes

Want to know what is going to be exploited?

We predict KEV entries!