MEDIUM 4.4 NVD

CVE-2026-89115

SAP Start Service and SAP Management Console store sensitive credential information in process memory without protection. An attacker with high privileges and l

SAP Start Service and SAP Management Console store sensitive credential information in process memory without protection. An attacker with high privileges and local access could inspect the memory to recover credentials and reuse them for authentication. This results in a high impact on confidentiality and no impact on integrity and availability.

References

https://me.sap.com/notes/3740168
https://url.sap/sapsecuritypatchday

Published: 2026-11-10 · Source: NVD · Feed updated: 2026-11-10

This medium severity vulnerability with a CVSS score of 4.4 was published on 2026-11-10 via NVD.

vulnfeed aggregates 17092 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.