VulnSocial

CVE-2026-89110

LOWCVSS 9.9 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal functionality. An attacker with low privileges could invoke internal operations on a preconfigured remote system. Depending on the remote connection configuration, this could lead to a full compromise of the remote system. This results in a high impact on confidentiality, integrity and availability.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-749

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-10-13: 210-13
Referenced assets1 URL
Full discourse2 posts
  • VulDB 🛡@vuldb

    ⚠️ A severe vulnerability was disclosed for SAP NetWeaver Visual Composer (CVE-2026-89110) vuldb.​com/vuln/417418 https://t.co/bVHPBJ9A0f

    0000081
    2.3K followersView on X
  • ThreatAft@ThreatAft

    🔐 SAP October Patch Day — 6 CVEs, two at CVSS 9.9. CVE-2026-89107: S/4HANA scripting injection → full system compromise. CVE-2026-89110: NetWeaver Visual Composer insufficient auth → remote system compromise. https://threataft.com/articles/sap-october-2026-cluster-cve-2026-89107-89110-89108-89113-58249-89120 #SAP #CVE #S4HANA #NetWeaver #InfoSec

    0000032
    50 followersView on X

Explore more

Back to dashboard