CVE-2026-89110
CRITICAL
NVD
CVSS Score
9.9
Severity
CRITICAL
Published
Oct 13, 2026
Vendor
unknown
Description
SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal functionality. An attacker with low privileges could invoke internal operations on a preconfigured remote system. Depending on the remote connection configuration, this could lead to a full compromise of the remote system. This results in a high impact on confidentiality, integrity and availability.