CVE-2026-89129
MEDIUM
NVD
CVSS Score
5.8
Severity
MEDIUM
Published
Nov 10, 2026
Vendor
unknown
Description
Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP NetWeaver AS Java (Web Services), an unauthenticated attacker could craft a SOAP request that causes the server to return a SOAP fault to a URL under the attackerοΏ½s control. Successful exploitation could allow the attacker to disclose information about connected systems, impacting confidentiality, while integrity and availability remain unaffected.