CVE-2026-89129

Due to a Server-Side Request Forgery SSRF vulnerability in SAP NetWeaver AS Java Web Services, an unauthenticated attacker could craft a SOAP request that causes the server to return a SOAP fault to a URL under the attacker�s control. Successful exploitation could allow the attacker to disclose...