SAP warns of maximum severity OAuth2 SSRF security flaw

SAP warns of maximum severity OAuth2 SSRF security flaw

SAP has addressed 20 security flaws across multiple products in its October 2026 security updates, including a maximum-severity vulnerability in the Cloud SDK for Python.

SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities

SAP has patched critical flaws in Cloud SDK for Python, NetWeaver, S/4HANA, and Manufacturing Integration and Intelligence.

SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft

A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant applications on SAP Business Technology Platform (BTP) that use the SDK, SAP's official Python client for BTP services. An attacker must be able to control the tenant subdomain,

Critical SAP Cloud SDK Flaw Threatens Credentials, Raises Patch Concerns

A critical SAP Cloud SDK vulnerability could expose application credentials, while security researchers identified additional validation gaps in later releases. Here's what organizations need to know about affected versions and mitigation.

SAP Patches Critical NetWeaver and S/4HANA Security Flaws Affecting Enterprise Systems

SAP’s Security Patch Day on October 13, 2026, addresses critical vulnerabilities found in enterprise applications, integration platforms, and developer… Read more →