@stackflag.bsky.socialCVE-2026-89108
SAP Manufacturing Integration and Intelligence allows an administrator to send a crafted request that creates a high‑privilege account on the Java server it runs on. This could give the attacker full control of…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stemshop.bsky.social🚨 CVE-2026-89111 — CVSS 10 CRITICAL The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications.... 🔎 https://stemshop.top/cve/CVE-2026-89111 #CVE #CyberSecurity #InfoSec
@stemshop.bsky.social🚨 CVE-2026-89110 — CVSS 9.9 CRITICAL SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal functional... 🔎 https://stemshop.top/cve/CVE-2026-89110 #CVE #CyberSecurity #InfoSec
@stemshop.bsky.social🚨 CVE-2026-89108 — CVSS 9.1 CRITICAL SAP Manufacturing Integration and Intelligence does not sufficiently enforce authorization boundaries withi... 🔎 https://stemshop.top/cve/CVE-2026-89108 #CVE #CyberSecurity #InfoSec
@stemshop.bsky.social🚨 CVE-2026-89107 — CVSS 9.9 CRITICAL SAP S/4HANA (Manage Substitution/Validation Rules) does not sufficiently validate input processed by rule d... 🔎 https://stemshop.top/cve/CVE-2026-89107 #CVE #CyberSecurity #InfoSec
@stemshop.bsky.social🚨 CVE-2026-87689 — CVSS 9.8 CRITICAL The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf::WebService... 🔎 https://stemshop.top/cve/CVE-2026-87689 #CVE #CyberSecurity #InfoSec
@stemshop.bsky.social🚨 CVE-2026-96119 — CVSS 9.9 CRITICAL IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information or... 🔎 https://stemshop.top/cve/CVE-2026-96119 #CVE #CyberSecurity #InfoSec
@intelliflame.bsky.socialSix phases, one pipeline: Recon → Discovery → Strategy → Exploit → Validate → Report AI forms the hypotheses. Real tools validate — every finding ships with evidence. github.com/BugTraceAI #infosec #bugbounty #pentesting #agenticAI
@euvd-bot.bsky.social🚨 EUVD-2026-98007 📊 7.1/10 🏢 frappe 📝 Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains a missing authorization vulnerability in which certain endpoints fail to enforce proper aut... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-98007 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-98008 📊 7.1/10 🏢 frappe 📝 Frappe ERPNext before 16.34.0 contains a missing authorization vulnerability that allows authenticated users to read financial data beyond their permitted ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-98008 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-98009 📊 7.1/10 🏢 frappe 📝 Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains a missing authorization vulnerability in certain endpoints that fail to enforce proper perm... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-98009 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-98010 📊 7.1/10 🏢 frappe 📝 Frappe ERPNext before 15.121.3 and 16.x before 16.35.0 contains a missing authorization vulnerability in which certain endpoints fail to enforce proper aut... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-98010 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-98011 📊 7.1/10 🏢 frappe 📝 Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains a missing authorization vulnerability in certain endpoints that fail to enforce proper auth... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-98011 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-98012 📊 7.1/10 🏢 frappe 📝 Frappe ERPNext before 15.120.0 and 16.x before 16.23.0 contains an authorization bypass in an endpoint that honours a caller-supplied flag disabling its ow... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-98012 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-98013 📊 5.3/10 🏢 frappe 📝 Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains a missing authorization vulnerability in which certain endpoints fail to enforce proper aut... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-98013 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-98014 📊 5.3/10 🏢 frappe 📝 Frappe ERPNext before 15.121.1 and 16.x before 16.34.2 contains a missing authorization vulnerability in certain endpoints that fail to enforce proper auth... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-98014 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-98015 📊 7.1/10 🏢 frappe 📝 Frappe ERPNext before 15.120.0 and 16.x before 16.33.0 contains a missing authorization vulnerability in certain endpoints that fail to enforce proper perm... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-98015 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-98016 📊 7.1/10 🏢 frappe 📝 Frappe ERPNext before 15.121.3 and 16.x before 16.35.0 contains a missing authorization vulnerability in certain endpoints that fail to enforce role-based ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-98016 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-98017 📊 7.1/10 🏢 frappe 📝 Frappe ERPNext before 16.34.2 contains an SQL injection vulnerability caused by missing input validation in multiple endpoints. Authenticated attackers wit... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-98017 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-98018 📊 7.1/10 🏢 frappe 📝 Frappe ERPNext before 15.120.0 and 16.x before 16.33.0 contains a missing authorization vulnerability in which certain endpoints fail to enforce proper per... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-98018 #cybersecurity #infosec #cve #euvd