CVE-2026-89124
published 2026-10-13CVE-2026-89124: Display Product Catalog Based on Customs Declaration application does not perform sufficient authorization checks within certain functionality, allowing an…
PriorityP423medium4.3CVSS 3.1
AVNACLPRLUINSUCLINAN
EPSS
0.17%
6.1th percentile
Display Product Catalog Based on Customs Declaration application does not perform sufficient authorization checks within certain functionality, allowing an authenticated low-privileged user to access sensitive information beyond their intended authorization scope. This vulnerability has low impact on confidentiality of the data, with no impact on the integrity and availability of the application.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sap_se | sap_hana | — | — |
| sap_se | sap_hana | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
SAP HANA 300/GTSCORE 200 improper authorization
vuldb·2026-10-13·CVSS 4.3
CVE-2026-89124 [MEDIUM] SAP HANA 300/GTSCORE 200 improper authorization
A vulnerability described as problematic has been identified in SAP HANA 300/GTSCORE 200. This affects an unknown function. Executing a manipulation can lead to improper authorization.
This vulnerability is handled as CVE-2026-89124. The attack can be executed remotely. There is not any exploit available.
GHSA
Display Product Catalog Based on Customs Declaration application does not perform sufficient authorization checks within certain functionality, allowing an authenticated low-privileged user to access
ghsa_unreviewed·2026-10-13
CVE-2026-89124 [MEDIUM] CWE-863 Display Product Catalog Based on Customs Declaration application does not perform sufficient authorization checks within certain functionality, allowing an authenticated low-privileged user to access
Display Product Catalog Based on Customs Declaration application does not perform sufficient authorization checks within certain functionality, allowing an authenticated low-privileged user to access sensitive information beyond their intended authorization scope. This vulnerability has low impact on confidentiality of the data, with no impact on the integrity and availability of the application.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-10-13
Published