Vulnerability Bulletins |
CVE-2026-89105 |
|
| Affected software | SAP |
| The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accepts tokens from unintended ambient IAS/XSUAA bindings, potentially allowing unauthorized access. This vulnerability allows an attacker to gain unauthorized access to the system by using tokens that should not be accepted, leading to a breach of security. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-89105 | |