🔍 Filter Threats
| Title | Severity | PoC | Actively Exploited | Source | Date |
|---|---|---|---|---|---|
| CVE-2026-89128 MEDIUM Due to Broken Access Control in SAP NetWeaver AS Java, an unauthenticated attacker could invoke affected SOAP operations exposed over HTTP without pro... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-89126 CRITICAL SAP Web Dispatcher does not sufficiently validate certain network input processed by an internal component. An unauthenticated attacker could send spe... | CRITICAL | ????? | ????? | NVD | 4 days ago |
| CVE-2026-89125 MEDIUM Due to Insecure Storage of Sensitive Information in SAP Web Dispatcher and Internet Communication Manager, an attacker with administrative privileges ... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-89114 HIGH SAP NetWeaver AS Java EDM Application does not perform an authentication check for certain web service requests. An unauthenticated attacker could sen... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-89103 CRITICAL SAP Gateway activates the default Access Control List with high privileges allowing categorization of external attacker as internal application server... | CRITICAL | ????? | ????? | NVD | 4 days ago |
| CVE-2026-89115 MEDIUM SAP Start Service and SAP Management Console store sensitive credential information in process memory without protection. An attacker with high privil... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-76973 HIGH Due to a Memory Corruption vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform, an unauthenticated attacker could send special... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-76970 HIGH Due to a Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform, an unauthenticated attacker could send specia... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-76966 HIGH Due to improper RFC protocol validation in the SAP Kernel used by the Application Server ABAP of SAP NetWeaver and ABAP Platform, an unauthenticated a... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-76965 CRITICAL SAP NetWeaver Application Server ABAP and ABAP Platform does not perform necessary authorization checks for certain internal functionality. An attacke... | CRITICAL | ????? | ????? | NVD | 4 days ago |
| CVE-2026-76964 CRITICAL SAP NetWeaver Application Server ABAP does not sufficiently validate certain network input processed by an internal component. An unauthenticated atta... | CRITICAL | ????? | ????? | NVD | 4 days ago |
| CVE-2026-124604 MEDIUM The RSA cryptographic key
material, including a private key and public key, is embedded within the GV-Cloud application package. Because Android app... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-124603 MEDIUM An API key is
hardcoded and retrievable from the GV-Cloud application package. Since Android
applications can be reverse engineered, embedding sensiti... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-124602 MEDIUM The RSA cryptographic
key material, including a private key and public key, is embedded within the GV-Access application package. Because Android app... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-124601 MEDIUM An
API key is hardcoded and retrievable from the GV-Access package. Since
Android applications can be reverse engineered, embedding sensitive API
cred... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-124599 MEDIUM The RSA cryptographic key material, including a private key and public key, is
embedded within the application package. Because Android applications ... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-124598 HIGH An
API key is hardcoded and retrievable from the GV-Face package. Since
Android applications can be reverse engineered, embedding sensitive API
creden... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-123439 UNKNOWN Rejected reason: This CVE ID has been rejected as a duplicate. | UNKNOWN | ????? | ????? | NVD | 4 days ago |
| CVE-2026-123438 UNKNOWN Rejected reason: This CVE ID has been rejected as a duplicate. | UNKNOWN | ????? | ????? | NVD | 4 days ago |
| CVE-2026-123437 UNKNOWN Rejected reason: This CVE ID has been rejected as a duplicate. | UNKNOWN | ????? | ????? | NVD | 4 days ago |