Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applications with extensibility enabled. An unauthenticated attacker could send specially crafted requests to obtain sensitive credentials and abuse them to replace or delete tenant data. Successful exploitation can result in a high impact on availability and integrity of the application. There may also be partial impact to the confidentiality of business data.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-09-08 | 1 | Disclosure1 |
| 2026-09-09 | 2 | General1Patch1 |
| 2026-09-11 | 1 | Patch1 |
⚠️ Vulnerabilidades en productos SAP ❗ CVE-2026-76969 ❗ CVE-2026-76958 ❗ CVE-2026-66768 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-sap-9/ https://t.co/rZwEcQNG4M
Post summary
The post lists three SAP product CVEs and directs readers to external links for additional information, but it contains no further details on exploitation, patches, or vulnerability specifics.
🚨 ALERTĂ - Vulnerabilități critice identificate la nivelul unor produse SAP 🔐 Printre vulnerabilitățile remediate se numără CVE-2026-44756, CVE-2026-58240, CVE-2026-76969 și CVE-2026-66768, toate clasificate drept vulnerabilități critice. 👉 https://www.dnsc.ro/citeste/alerta-vulnerabilitati-critice-identificate-la-nivelul-unor-produse-sap #DNSC https://t.co/xmAg4FRMpy
Post summary
The alert announces the discovery of critical SAP product vulnerabilities and notes that they have been remediated, implying that patches or fixes are now available.
News: SAP cds-mtxs CVE-2026-76969 (CVSS 9.4) lets unauth attackers steal credentials from multitenant CAP apps with extensibility, then replace or delete tenant data. Update past 1.18.3/2.7.6/3.9.6/4.0.2. https://support.sap.com/en/my-support/knowledge-base/security-notes-news/september-2026.html
Post summary
SAP has issued patches for CVE-2026-76969, a CVSS 9.4 vulnerability that lets unauthenticated attackers steal credentials and alter tenant data in multi‑tenant CDS‑MTXS applications.
CVE-2026-76969 @sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applications with extensibility enabled. An unauthentica… https://www.cve.org/CVERecord?id=CVE-2026-76969
Post summary
The text reports a vulnerability in @sap/cds-mtxs where insufficient checks allow potential unauthenticated access in multitenant CAP apps, but it lacks details on a PoC, exploit, patch, or live exploitation.