CVE-2026-89111: Critical SAP Cloud SDK SSRF

Reported by SOCRadar (Ameer Owda)

Summary by Cyber Security News14 Oct 2026, 16:03 CET

About this summary. This is a short excerpt from the description that SOCRadar published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://socradar.io/blog/cve-2026-89111-critical-sap-cloud-sdk-ssrf/

CVE-2026-89111: Critical SAP Cloud SDK SSRF SAP has disclosed CVE-2026-89111, a maximum-severity server-side request forgery (SSRF) vulnerability in SAP Cloud SDK for Python that can expose OAuth2 client credentials. What Is CVE-2026-89111? CVE-2026-89111 (CVSS 10.0), also tracked as GHSA-4mv3-jxxm-9cx2, is a CWE-918 SSRF vulnerability affecting OAuth2 token requests.

Read the full article at SOCRadar →

Source attribution: headline and facts are from SOCRadar (socradar.io). Summary method: excerpt of the source description. See our source attribution policy.