{"metadata": {"vulnerability": "CVE-2026-89107", "count": 19, "kinds": {"milestone": 5, "sighting": 4, "kev": 0, "other": 10}}, "data": [{"timestamp": "2026-09-10T22:24:03.822Z", "date_only": false, "value": "2026-09-10T22:24:03.822Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-89107", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1300", "record": "CERTFR-2026-AVI-1300", "field": "last_revision_date"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": true, "value": "2026-10-13", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1300", "record": "CERTFR-2026-AVI-1300", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-89107", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-89107", "record": "FKIE_CVE-2026-89107", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1300", "record": "CERTFR-2026-AVI-1300", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-13T00:23:52.510Z", "date_only": false, "value": "2026-10-13T00:23:52.510Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-89107", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T00:23:52.510Z", "date_only": false, "value": "2026-10-13T00:23:52.510Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / sap", "record": "CVE-2026-89107", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T01:03:41.295Z", "date_only": false, "value": "2026-10-13T01:03:41.295063Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117430905785281219", "record": "CVE-2026-89107", "field": "creation_timestamp", "uuid": "8a39f3ff-00f4-4af8-9ae5-5aedad5f7214", "content": "CVE-2026-89107 Code Injection vulnerability in SAP S/4HANA (Manage Substitution/Validation Rules) SAP S/4HANA (Manage Substitution/Validation Rules) does not sufficiently validate input processed by rule definition functionality that utilizes a domain-specific scripting language. An authenticated attacker with specific business privileges could submit specially crafted input, which is interpreted as executable ABAP code by the rule processing logic. Successful exploitation could allow the attacker to execute ABAP arbitrary code into the system, resulting in full compromise of the affected system and high impact on confidentiality, integrity, and availability of the system.\nhttps://www.cve.org/CVERecord?id=CVE-2026-89107https://me.sap.com/notes/3805589https://url.sap/sapsecuritypatchday#sap #SAP_SE #SAPS/4HANA(ManageSubstitution/ValidationRules)#CVE_2026_89107#bot", "url": "https://infosec.exchange/users/cve/statuses/117430905785281219"}, {"timestamp": "2026-10-13T01:16:47Z", "date_only": false, "value": "2026-10-13T01:16:47Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-MW39-66PQ-V675", "record": "GHSA-MW39-66PQ-V675", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-13T01:16:47.507Z", "date_only": false, "value": "2026-10-13T01:16:47.507", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-89107", "record": "FKIE_CVE-2026-89107", "field": "published"}, {"timestamp": "2026-10-13T01:33:28.172Z", "date_only": false, "value": "2026-10-13T01:33:28.172945Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxpvalqddd2k", "record": "CVE-2026-89107", "field": "creation_timestamp", "uuid": "f71d3bd1-f08d-4580-8958-5ce670c79799", "content": "\ud83d\udd34 CVE-2026-89107 - Critical (9.9)\n\nSAP S/4HANA (Manage Substitution/Validation Rules) does not sufficiently validate input processed...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-89107/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxpvalqddd2k"}, {"timestamp": "2026-10-13T02:00:06.502Z", "date_only": false, "value": "2026-10-13T02:00:06.502928Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxpwqa2qe327", "record": "CVE-2026-89107", "field": "creation_timestamp", "uuid": "90679a11-8495-4ac1-bee0-f913de0fec2c", "content": "CVE-2026-89107\nThe rule\u2011definition feature in SAP S/4HANA does not check the data it receives, so a user who has certain business permissions can enter specially crafted input that is treated as program code. If exploited,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxpwqa2qe327"}, {"timestamp": "2026-10-13T02:08:30.640Z", "date_only": false, "value": "2026-10-13T02:08:30.640783Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxpx7ba5w22n", "record": "CVE-2026-89107", "field": "creation_timestamp", "uuid": "fd472905-5945-4531-950a-bad83d2b284f", "content": "\ud83d\udea8 CVE-2026-89107 \u2014 CVSS 9.9 CRITICAL\n\nSAP S/4HANA (Manage Substitution/Validation Rules) does not sufficiently validate input processed by rule d...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-89107\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxpx7ba5w22n"}, {"timestamp": "2026-10-13T03:30:30Z", "date_only": false, "value": "2026-10-13T03:30:30Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-MW39-66PQ-V675", "record": "GHSA-MW39-66PQ-V675", "field": "published"}, {"timestamp": "2026-10-13T03:30:30Z", "date_only": false, "value": "2026-10-13T03:30:30Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-MW39-66PQ-V675", "record": "GHSA-MW39-66PQ-V675", "field": "modified"}, {"timestamp": "2026-10-14T03:58:55.884Z", "date_only": false, "value": "2026-10-14T03:58:55.884Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-89107", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-14T03:58:55.884Z", "date_only": false, "value": "2026-10-14T03:58:55.884Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-89107", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T20:38:04.303Z", "date_only": false, "value": "2026-10-15T20:38:04.303", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-89107", "record": "FKIE_CVE-2026-89107", "field": "lastModified"}]}