CVE-2026-45170

Idira Privilege Cloud Connector versions prior 1.1.100504 under specific conditions and configuration scenarios, TLS certificate validation may not be fully enforced. CyberArk Security Bulletin: CA26-17...

CVE-2026-45170 Idira Privilege Cloud Connector: Potential Security Bypass due to Incomplete TLS Certificate Validation

Idira Privilege Cloud Connector versions prior 1.1.100504 under specific conditions and configuration scenarios, TLS certificate validation may not be fully enforced. CyberArk Security Bulletin: CA26-17...

CVE-2026-45170

CVE-2026-45170 concerns Idira Privilege Cloud Connector, where versions prior to 1.1.100504 may not enforce TLS certificate validation under certain conditions/configurations. This could enable a potential security bypass affecting confidentiality, integrity, and availability, as indicated by the...

PT-2026-48816

Idira Privilege Cloud Connector versions prior 1.1.100504 under specific conditions and configuration scenarios, TLS certificate validation may not be fully enforced. CyberArk Security Bulletin: CA26-17...

CVE-2021-33693

SAP Cloud Connector, version - 2.0, allows an authenticated administrator to modify a configuration file to inject malicious codes that could potentially lead to OS command execution...

CVE-2021-33694

SAP Cloud Connector, version - 2.0, does not sufficiently encode user-controlled inputs, allowing an attacker with Administrator rights, to include malicious codes that get stored in the database, and when accessed, could be executed in the application, resulting in Stored Cross-Site Scripting...

CVE-2021-33692

SAP Cloud Connector, version - 2.0, allows the upload of zip files as backup. This backup file can be tricked to inject special elements such as '..' and '/' separators, for attackers to escape outside of the restricted location to access files or directories...

EUVD-2021-10043

Malware in sbrugna...

EUVD-2021-20370

Malware in sbrugna...

EUVD-2021-20369

Malware in sbrugna...

EUVD-2021-20371

Malware in sbrugna...

EUVD-2019-1020

Malware in sbrugna...

EUVD-2019-1019

Malware in sbrugna...

EUVD-2018-14264

Malware in sbrugna...

EUVD-2021-20372

Malware in sbrugna...

EUVD-2024-31908

Malicious code in bioql PyPI...

EUVD-2023-53531

Malicious code in bioql PyPI...

EUVD-2024-22958

Malicious code in bioql PyPI...

EUVD-2025-24204

Malicious code in bioql PyPI...

Vulnerabilities fixed in SAP products

SAP has fixed vulnerabilities in several products, including in SAP NetWeaver Application Server ABAP, SAP S/4HANA, SAP Landscape Transformation and AP Cloud Connector. The vulnerabilities include circumvention of authorization controls, Cross-Site Scripting XSS and a Directory Traversal...