https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-14T09:20:37.591739+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-89111 CVE-2026-89111 — OAuth2 SSRF vulnerability in SAP Cloud SDK for Python 2026-10-14T09:20:37.593629+00:00

Affected: SAP_SE SAP Cloud

The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker who controls the tenant_subdomain parameter can redirect OAuth2 token requests to an attacker-controlled server, causing client credentials to be exfiltrated.