Vulnerabilities

Summary — last 7 days

New vulnerabilities4,645▼ 588 vs. last week
Critical / high1,864▼ 1,145 vs. last week
New active exploitation (KEV)9▼ 2 vs. last week
Unscored (no CVSS)747▲ 639 vs. last week
More filters
–

1 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
Awaiting AnalysisCritical (10)0.27%—SAP Cloud SDK FOR PythonAI10/12/202610/15/2026
The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker who controls the tenant_subdomain parameter can redirect OAuth2 token requests to an attacker-controlled server, causing client credentials to be exfiltrated.
Orbitaley — Vulnerabilities