In the news, but not on CISA's list of exploited flaws yet. Treat it as urgent if you run it.
0.32%
Fix it in your code
Each opens with a short prompt that points at Global Hack Map's public runbook for CVE-2026-89103. Nothing runs until you send it.
SAP Gateway activates the default Access Control List with high privileges allowing categorization of external attacker as internal application server. As a result an unauthenticated attacker with network access to the SAP Gateway could exploit this weakness to potentially perform unauthorized actions within the application environment, resulting in a high impact on the confidentiality, integrity, and availability of the affected system.