Detections
Analytics
CVE-2026-89106
medium
Description
SAP UI5 does not perform sufficient input validation under certain configurations. An attacker with low privileges could submit specially crafted content that is later rendered in a victim's browser. This vulnerability has a low impact on confidentiality and integrity. There is no impact on availability.
References
https://url.sap/sapsecuritypatchday