Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 8 min 165 bronnen 1 kritiek 17 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2026-89105

MEDIUM · 4.2 CVSS Gepubliceerd: CWE-1188

Beschrijving

The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accepts tokens from unintended ambient IAS/XSUAA bindings, potentially allowing unauthorized access. This vulnerability allows an attacker to gain unauthorized access to the system by using tokens that should not be accepted, leading to a breach of security.

References