CVE-2026-89124 Missing Authorization Check in SAP Global Trade Services, edition for SAP HANA (Display Product Catalog Based on Customs Declaration)

Display Product Catalog Based on Customs Declaration application does not perform sufficient authorization checks within certain functionality, allowing an authenticated low-privileged user to access sensitive information beyond their intended authorization scope. This vulnerability has low impac...

CVE-2026-89124

The Display Product Catalog Based on Customs Declaration application within SAP Global Trade Services, edition for SAP HANA contains a missing authorization check (CWE-863). This flaw allows an authenticated low-privileged user to access sensitive information outside their intended authorization ...

CVE-2026-89124 Missing Authorization Check in SAP Global Trade Services, edition for SAP HANA (Display Product Catalog Based on Customs Declaration)

Display Product Catalog Based on Customs Declaration application does not perform sufficient authorization checks within certain functionality, allowing an authenticated low-privileged user to access sensitive information beyond their intended authorization scope. This vulnerability has low impac...

CVE-2026-89105 Improper Authentication in HybridTokenAuthenticator of SAP/cloud-security-services-integration-library

The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accepts tokens from unintended ambient IAS/XSUAA bindings, potentially allowing unauthorized access. This vulnerability allows an attacker to gain unauthorized access to the system by using tokens that...

CVE-2026-89105 Improper Authentication in HybridTokenAuthenticator of SAP/cloud-security-services-integration-library

The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accepts tokens from unintended ambient IAS/XSUAA bindings, potentially allowing unauthorized access. This vulnerability allows an attacker to gain unauthorized access to the system by using tokens that...

CVE-2026-89105

The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accepts tokens from unintended ambient IAS/XSUAA bindings, potentially allowing unauthorized access. This vulnerability allows an attacker to gain unauthorized access to the system by using tokens that...

EUVD-2026-98188

The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accepts tokens from unintended ambient IAS/XSUAA bindings, potentially allowing unauthorized access. This vulnerability allows an attacker to gain unauthorized access to the system by using tokens that...

CVE-2026-89105

The SAP/cloud-security-services-integration-library contains an improper authentication vulnerability in its HybridTokenAuthenticator component. The flaw occurs because the component accepts tokens from unintended ambient IAS/XSUAA bindings , which could allow an attacker to gain unauthorized acc...

CVE-2026-89105 Improper Authentication in HybridTokenAuthenticator of SAP/cloud-security-services-integration-library

The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accepts tokens from unintended ambient IAS/XSUAA bindings, potentially allowing unauthorized access. This vulnerability allows an attacker to gain unauthorized access to the system by using tokens that...

PT-2026-111133

Name of the Vulnerable Software and Affected Versions SAP/cloud-security-services-integration-library affected versions not specified Description The HybridTokenAuthenticator component accepts tokens from unintended ambient IAS/XSUAA bindings. This allows an attacker to gain unauthorized access t...

PT-2026-112400

Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally...

CVE-2026-70229: Incorrect Authorization

Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...

CVE-2026-108131: Improper Certificate Validation

No cwe for this issue in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

Microsoft Windows: CVE-2026-83674: Active Directory Federation Services (AD FS) Spoofing Vulnerability

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

PT-2026-113039

Name of the Vulnerable Software and Affected Versions System.Security.Cryptography.Xml versions 8.0.0 through 8.0.4 Description Improper certificate validation in KeyInfoX509Data allows the acceptance of serialized certificate formats containing attacker-controlled chain metadata instead of...

Microsoft .NET Framework: CVE-2026-96222: Active Directory Federation Services (AD FS) Spoofing Vulnerability

Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-96222: Improper Certificate Validation

Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

Microsoft Windows: CVE-2026-83648: Windows Active Directory Domain Services Denial of Service Vulnerability

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

CVE-2026-88174: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

PT-2026-118135

Уязвимость службы Active Directory Federation Services AD FS операционных систем Windows связана с обходом аутентификации посредством спуфинга. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, проводить спуфинг-атаки...