CYBERSECURITYTRACKER
Permanent story citation

SAP warns of maximum severity OAuth2 SSRF security flaw

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 10091

As cited

Copy frozen at (site build).

vulnerabilities

SAP warns of maximum severity OAuth2 SSRF security flaw

SAP released security updates on October 13, 2026, addressing 20 vulnerabilities across multiple products, including a maximum-severity OAuth2 server-side request forgery (SSRF) flaw in the Cloud SDK for Python.

Why it matters: Organizations running SAP Cloud SDK for Python should apply this update immediately to prevent account takeover and lateral movement attacks exploiting the maximum-severity OAuth2 SSRF.

VendorsSAP
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

SAP warns of maximum severity OAuth2 SSRF security flaw

SAP released security updates on October 13, 2026, addressing 20 vulnerabilities across multiple products, including a maximum-severity OAuth2 server-side request forgery (SSRF) flaw in the Cloud SDK for Python.

Why it matters: Organizations running SAP Cloud SDK for Python should apply this update immediately to prevent account takeover and lateral movement attacks exploiting the maximum-severity OAuth2 SSRF.

VendorsSAP
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary

Open in glossary