CVE-2026-89111 | SAP Cloud SDK up to 0.45.1 OAuth2 tenant_subdomain server-side request forgery

October 13, 2026 Yanac

A vulnerability labeled as critical has been found in SAP Cloud SDK up to 0.45.1. This vulnerability affects unknown code of the component OAuth2. The manipulation of the argument tenant_subdomain results in server-side request forgery.

This vulnerability is known as CVE-2026-89111. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More