🔍 Filter Threats
| Title | Severity | PoC | Actively Exploited | Source | Date |
|---|---|---|---|---|---|
| CVE-2026-109807 HIGH SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming requests. An unauthenticated user could ... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-109806 HIGH SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming requests. An unauthenticated user could ... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-109804 HIGH SAP Message Server does not properly handle certain malformed requests, which could be leveraged by an unauthenticated attacker to send specially craf... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-109803 CRITICAL SAP NetWeaver Knowledge Management (XML Forms) does not sufficiently restrict the selection of XSL transformations processed by the affected functiona... | CRITICAL | ????? | ????? | NVD | 3 days ago |
| CVE-2026-109802 MEDIUM SAP NetWeaver Application Server for ABAP does not properly validate certain input values. An authenticated user could send specially crafted requests... | MEDIUM | ????? | ????? | NVD | 3 days ago |
| CVE-2026-109801 MEDIUM SAP NetWeaver Application Server Java (NWDI Cockpit)� does not perform sufficient authorization checks for certain functionality that retrieves sens... | MEDIUM | ????? | ????? | NVD | 3 days ago |
| CVE-2026-109800 HIGH SAP Web Dispatcher does not sufficiently validate certain inputs during processing, which could lead to memory corruption. An attacker authenticated a... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-109805 MEDIUM Due to a weak HMAC cryptography calculation when receiving an RFC callback in SAP NetWeaver and ABAP Platform (Application Server ABAP), an authentica... | MEDIUM | ????? | ????? | NVD | 3 days ago |
| CVE-2026-109799 HIGH The SAP Cloud SDK for Python contains an improper cryptographic signature verification vulnerability (CWE-347) in IASContextProvider, the runtime-cont... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-109797 HIGH In SAP/astonish, an authenticated user could potentially identify and operate on another team�s sandbox containers because of improper tenant isolat... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-109798 CRITICAL SAP BusinessObjects Business Intelligence Platform (Web Intelligence) does not properly restrict external entity resolution when processing OLAP conne... | CRITICAL | ????? | ????? | NVD | 3 days ago |
| CVE-2026-109796 MEDIUM SAP NetWeaver Application Server ABAP and ABAP Platform does not properly initialize memory in certain internal components. Under certain condition, a... | MEDIUM | ????? | ????? | NVD | 3 days ago |
| CVE-2026-109795 CRITICAL SAP NetWeaver does not perform necessary authorization checks and lacks sufficient input validation in certain remote-enabled functionality. An attack... | CRITICAL | ????? | ????? | NVD | 3 days ago |
| CVE-2026-109794 HIGH SAP NetWeaver Application Server ABAP, ABAP Platform, and SAP Web Dispatcher do not sufficiently handle resource consumption when processing certain r... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-109793 HIGH SAP NetWeaver Application Server ABAP and SAP Web Dispatcher do not sufficiently validate certain header values processed during inbound request handl... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-107245 HIGH Versa has confirmed a buffer overflow vulnerability in the IPsec implementation on VOS, aka Versa FlexVNF.
Buffer Overflow Vulnerabi... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-107244 HIGH The Node.js web service on VOS (previously Versa FlexVNF) is used for URL-based Zero Touch Provisioning (ZTP) of the VOS appliance and is not required... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-107243 HIGH The Node.js web service on VOS (previously Versa FlexVNF) is used for URL-based Zero Touch Provisioning (ZTP) of the VOS appliance and is not required... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-107242 CRITICAL The Node.js web service on VOS (previously Versa FlexVNF) is used for URL-based Zero Touch Provisioning (ZTP) of the VOS appliance and is not required... | CRITICAL | ????? | ????? | NVD | 3 days ago |
| CVE-2026-107241 HIGH The Node.js web service on VOS (previously Versa FlexVNF) is used for URL-based Zero Touch Provisioning (ZTP) of the VOS appliance and is not required... | HIGH | ????? | ????? | NVD | 3 days ago |