2026 CVE Vulnerabilities
85,287 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-22836 | — | — | — | Jan 13, 2026 | Rejected reason: Not used |
| CVE-2026-22835 | — | — | — | Jan 13, 2026 | Rejected reason: Not used |
| CVE-2026-22834 | — | — | — | Jan 13, 2026 | Rejected reason: Not used |
| CVE-2026-22833 | — | — | — | Jan 13, 2026 | Rejected reason: Not used |
| CVE-2026-22832 | — | — | — | Jan 13, 2026 | Rejected reason: Not used |
| CVE-2026-22831 | — | — | — | Jan 13, 2026 | Rejected reason: Not used |
| CVE-2026-22830 | — | — | — | Jan 13, 2026 | Rejected reason: Not used |
| CVE-2026-22829 | — | — | — | Jan 13, 2026 | Rejected reason: Not used |
| CVE-2026-0514 | MEDIUM | 6.1 | 0.2% | Jan 13, 2026 | Due to a Cross-Site Scripting (XSS) vulnerability in SAP Business Connector, an unauthenticated attacker could craft a m... |
| CVE-2026-0513 | MEDIUM | 4.7 | 0.2% | Jan 13, 2026 | Due to an Open Redirect Vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog), an unauthen... |
| CVE-2026-0511 | HIGH | 8.1 | 0.3% | Jan 13, 2026 | SAP Fiori App Intercompany Balance Reconciliation does not perform necessary authorization checks for an authenticated u... |
| CVE-2026-0510 | LOW | 3 | 0.1% | Jan 13, 2026 | The User Management Engine (UME) in NetWeaver Application Server for Java (NW AS Java) utilizes an obsolete cryptographi... |
| CVE-2026-0507 | HIGH | 8.4 | 0.9% | Jan 13, 2026 | Due to an OS Command Injection vulnerability in SAP Application Server for ABAP and SAP NetWeaver RFCSDK, an authenticat... |
| CVE-2026-0506 | HIGH | 8.1 | 0.2% | Jan 13, 2026 | Due to a Missing Authorization Check vulnerability in Application Server ABAP and ABAP Platform, an authenticated attack... |
| CVE-2026-0504 | LOW | 3.8 | 0.2% | Jan 13, 2026 | Due to insufficient input handling, the SAP Identity Management REST interface allows an authenticated administrator to ... |
| CVE-2026-0503 | MEDIUM | 6.4 | 0.2% | Jan 13, 2026 | Due to missing authorization check in the SAP ERP Central Component (SAP ECC) and SAP S/4HANA (SAP EHS Management), an a... |
| CVE-2026-0501 | CRITICAL | 9.9 | 0.4% | Jan 13, 2026 | Due to insufficient input validation in SAP S/4HANA Private Cloud and On-Premise (Financials General Ledger), an authent... |
| CVE-2026-0500 | HIGH | 8.8 | 0.4% | Jan 13, 2026 | Due to the usage of vulnerable third party component in SAP Wily Introscope Enterprise Manager (WorkStation), an unauthe... |
| CVE-2026-0499 | MEDIUM | 6.1 | 0.2% | Jan 13, 2026 | SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The... |
| CVE-2026-0498 | HIGH | 7.2 | 0.4% | Jan 13, 2026 | SAP S/4HANA (Private Cloud and On-Premise) allows an attacker with admin privileges to exploit a vulnerability in the fu... |
| CVE-2026-0497 | MEDIUM | 4.3 | 0.2% | Jan 13, 2026 | SAP Product Designer Web UI of Business Server Pages allows authenticated non-administrative users to access non-sensiti... |
| CVE-2026-0496 | MEDIUM | 6.6 | 0.2% | Jan 13, 2026 | SAP Fiori App Intercompany Balance Reconciliation allows an attacker with high privileges to upload any file (including... |
| CVE-2026-0495 | MEDIUM | 5.1 | 0.1% | Jan 13, 2026 | SAP Fiori App Intercompany Balance Reconciliation allows an attacker with high privileges to send uploaded files to arb... |
| CVE-2026-0494 | MEDIUM | 4.3 | 0.2% | Jan 13, 2026 | Under certain conditions SAP Fiori App Intercompany Balance Reconciliation application allows an attacker to access info... |
| CVE-2026-0493 | MEDIUM | 4.3 | 0.1% | Jan 13, 2026 | Due to a Cross-Site Request Forgery (CSRF) vulnerability in SAP Fiori App Intercompany Balance Reconciliation an attacke... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now