CVE-2026-89118 — Information Disclosure vulnerability in SAP NetWeaver Enterprise Portal

CVE-2026-89118

Information Disclosure vulnerability in SAP NetWeaver Enterprise Portal PUBLISHED

Description (CNA)

SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to access restricted resources and retrieve non-critical application information, which leads to Low impact on Confidentiality, but there is no impact on Integrity and Availability of the application.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP NetWeaver Enterprise Portal	affected EP-RUNTIME 7.50

CWE

CWE-552

References

https://me.sap.com/notes/3789825
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.