search
NetWeaver Visual Composer
Trends
- 1SAP October Patch Day fixes six flaws including two critical●SAP October Patch Day — 6 CVEs, peak CVSS 9.9. CVE-2026-89107 (9.9): S/4HANA scripting injection → full system compromis
SAP has released its October security updates, patching six vulnerabilities with a maximum CVSS score of 9.9. The most severe issues include CVE-2026-89107, a scripting injection flaw in S/4HANA that can lead to full system compromise, and CVE-2026-89110, an authentication bypass in NetWeaver Visual Composer allowing remote system compromise. A 9.1-rated admin boundary bypass in MII affecting Java servers was also fixed. Security teams are urged to apply the patches quickly.