{"vulnerability": "CVE-2026-89110", "sightings": [{"uuid": "b5eaf7af-38ab-4edb-a55f-201b44ce17e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89110", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117430911083233374", "content": "CVE-2026-89110 Broken Access Control in SAP NetWeaver Visual Composer SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal functionality. An attacker with low privileges could invoke internal operations on a preconfigured remote system. Depending on the remote connection configuration, this could lead to a full compromise of the remote system. This results in a high impact on confidentiality, integrity and availability.\nhttps://www.cve.org/CVERecord?id=CVE-2026-89110https://me.sap.com/notes/3797111https://url.sap/sapsecuritypatchday#sap #SAP_SE #SAPNetWeaverVisualComposer#CVE_2026_89110#bot", "creation_timestamp": "2026-10-13T01:05:02.114295Z"}, {"uuid": "c7058586-4c13-4b4c-bb30-6a3578ff433a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89110", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxpx7rah2p22", "content": "\ud83d\udea8 CVE-2026-89110 \u2014 CVSS 9.9 CRITICAL\n\nSAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal functional...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-89110\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-13T02:08:48.133443Z"}, {"uuid": "316b808f-7428-4cd3-8f82-4c5b34c62030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89110", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxpxc3hwv42r", "content": "CVE-2026-89110\nThe Visual Composer component of SAP NetWeaver does not properly check a user's rights in some portal features. This means someone with only basic access could trigger actions on a pre\u2011configured external\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-10-13T02:10:05.264683Z"}, {"uuid": "ad18ad78-c9d1-4ab8-ad5e-edb4a750ddda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-89110", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117432072738618132", "content": "CRITICAL CVE-2026-89110 in SAP NetWeaver Visual Composer: Low-priv users can exploit insufficient auth checks to fully compromise remote systems. No patch yet \u2014 restrict access & monitor activity. Details: https://radar.offseq.com/threat/cve-2026-89110-cwe-749-exposed-dangerous-method-or-function-in-sapse-sap-netweaver-visual-composer-f4b6d144b645c4b3 #OffSeq #SAP #Vuln #CVEs", "creation_timestamp": "2026-10-13T06:00:28.831814Z"}, {"uuid": "717baceb-429c-4999-9d86-3f4e555c6485", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-89110", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxqe62yfcz2j", "content": "SAP NetWeaver Visual Composer hit by CRITICAL CVE-2026-89110 (CVSS 9.9): insufficient auth checks may let low-priv users compromise remote systems. Restrict access & monitor now. https://radar.offseq.com/threat/cve-2026-89110-cwe-749-exposed-dangerous-method-or-function-in-sapse-sap-netweaver-vis...", "creation_timestamp": "2026-10-13T06:00:30.039024Z"}, {"uuid": "005f912c-7671-40d8-ba82-dda630cd2c4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89110", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117432210814890487", "content": "\u26a0\ufe0f A severe vulnerability was disclosed for SAP NetWeaver Visual Composer (CVE-2026-89110) https://vuldb.com/vuln/417418", "creation_timestamp": "2026-10-13T06:35:34.932816Z"}, {"uuid": "5261e0fc-d243-42da-9479-b4e1a67252b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89110", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mxsdqjyj522t", "content": "The latest update for #CyCognito includes \"Emerging Threat: (CVE-2026-89110) #SAP NetWeaver Visual Composer Broken Access Control\" and \"Emerging Threat: (CVE-2026-107406) NetScaler ADC and Gateway Remote Code Execution via SAML\".\n \n#cybersecurity #AttackSurfaceManagement https://opsmtrs.com/44Srq0X", "creation_timestamp": "2026-10-14T00:58:14.876089Z"}, {"uuid": "7c3d85c5-810a-4757-9e16-5f25d61dc42b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89110", "type": "seen", "source": "https://bsky.app/profile/cybowl.bsky.social/post/3mxswjrvxys27", "content": "Vuln\u00e9rabilit\u00e9s critiques (CVSS \u2265 9) \u00b7 4\n\u2022 GitLab (CVE-2026-97229), CVSS 10.0 (Cyberveille ESante)\n\u2022 SAP NetWeaver Visual Composer (VC70RUNTIME 7.50) (CVE-2026-89110), CVSS 9.9 (Cyberveille ESante)\n\u2022 HAProxy Data Plane API (CVE-2026-109575), CVSS 9.8 (Cyberveille ESante)", "creation_timestamp": "2026-10-14T06:34:29.187838Z"}]}