Mmastodon TechnologyCybersecurity first seen 2 h ago, last 2 h ago, peak #10
SAP October Patch Day fixes six flaws including two critical
Original: SAP October Patch Day — 6 CVEs, peak CVSS 9.9. CVE-2026-89107 (9.9): S/4HANA scripting injection → full system compromis
SAP has released its October security updates, patching six vulnerabilities with a maximum CVSS score of 9.9. The most severe issues include CVE-2026-89107, a scripting injection flaw in S/4HANA that can lead to full system compromise, and CVE-2026-89110, an authentication bypass in NetWeaver Visual Composer allowing remote system compromise. A 9.1-rated admin boundary bypass in MII affecting Java servers was also fixed. Security teams are urged to apply the patches quickly.
Why now: Critical vulnerabilities in widely deployed SAP enterprise software put many organisations at immediate risk until patched.
SAPS/4HANANetWeaver Visual ComposerSAP MII
Evidence
- SAP October Patch Day — 6 CVEs, peak CVSS 9.9. CVE-2026-89107 (9.9): S/4HANA scripting injection → full system compromise CVE-2026-89110 (9.9): NetWeaver Visual Composer auth bypass → remote system compromise CVE-2026-89108 (9.1): MII admin boundary bypass → Java server… · threataft@infosec.exchange · 1
API: https://socialmediatrends-api.osmike.com/v1/trends/2076361