🛑 New CVSS 10.0 flaw disclosed in SAP Cloud SDK for Python (CVE-2026-89111).
It allows attackers to steal OAuth2 client IDs and secrets by manipulating tenant subdomains.
🛠️ Fix: Ensure you're running v0.55.1 or newer (latest is 0.58.4).
Details: https://thehackernews.com/2026/10/sap-discloses-critical-cvss-10-flaw-in.html
Post #10316
5.3K

- 🔥 6