https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-10T17:31:13.565905+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/certfr-2026-avi-1497 certfr-2026-avi-1497 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… 2026-11-10T17:31:13.570531+00:00 certfr-2026-avi-1497 https://db.gcve.eu/vuln/fkie_cve-2026-120013 fkie_cve-2026-120013 2026-11-10T17:31:13.570742+00:00

The agent_memory module accepts a caller-supplied tenant parameter in create_client(tenant=...). Prior to version 0.50.0, the tenant parameter was not validated before being used to construct filesystem paths for secret resolution. A value containing path traversal sequences (for example, attacker-corp/../victim-corp) could cause the resolved path to escape the intended directory and access another tenant's secrets under:Plain Text/etc/secrets/appfnd/hana-agent-memory/<tenant>/Successful exploitation could allow unauthorized access to another tenant's mounted credentials, including OAuth client IDs and client secrets. This vulnerability could enable cross-tenant access to sensitive credentials.

 https://db.gcve.eu/vuln/wid-sec-w-2026-4420 WID-SEC-W-2026-4420 — SAP Patch Day November 2026: Mehrere Schwachstellen 2026-11-10T17:31:13.570839+00:00

Ein Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um Daten zu manipulieren, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen und um beliebigen Programmcode auszuführen.