CVE-2026-89120
7.1 HIGHPublished 2026-10-13 · Updated 2026-10-15
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorization weakness. The session manager can be opened in single transaction mode, including from FLP. A low-privileged attacker could exploit this to bypass restrictions via specially crafted requests, resulting in high impact on integrity and low impact on confidentiality. There is no impact on availability.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
Weaknesses
CWE-1188
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- MEDIUMCVE-2026-100260
- CRITICALCVE-2026-100291
- HIGHCVE-2026-102676PoC
- CRITICALCVE-2026-103956PoC
- HIGHCVE-2026-104077
- HIGHCVE-2026-104078
- HIGHCVE-2026-105744PoC
- HIGHCVE-2026-109569PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.