Vulnerability Bulletins |
CVE-2026-89120 |
|
| Affected software | SAP |
| A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorization weakness. The session manager can be opened in single transaction mode, including from FLP. A low-privileged attacker could exploit this to bypass restrictions via specially crafted requests, resulting in high impact on integrity and low impact on confidentiality. There is no impact on availability. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-89120 | |