Skip to content

#csrf

1 article

Security Alerts Nov 10, 2026

CVE-2026-89119: CSRF in Admin Functions of SAP Web Dispatcher and ICM

SAP Web Dispatcher and the ICM of SAP NetWeaver AS ABAP do not validate requests in some administrative functions. A link opened by a logged-on administrator can lead to full compromise of the operating system...