CVE-2026-76972
Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence
CVSS score
6.5
EPSS probability
—
Risk score
0.7
Published
7 h ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
10.0
CVE-2025-31324 Actively exploited
Missing Authorization check in SAP NetWeaver (Visual Composer development server)
S
Patch status unknownEPSS %99
9.1
CVE-2025-42999 Actively exploited
Insecure Deserialization in SAP NetWeaver (Visual Composer development server)
S
WorkaroundEPSS %13
10.0
CVE-2026-89111
OAuth2 SSRF vulnerability in SAP Cloud SDK for Python
S
Patch status unknown
9.9
CVE-2026-89110
Broken Access Control in SAP NetWeaver Visual Composer
S
Patch status unknown
9.9
CVE-2026-89107
Code Injection vulnerability in SAP S/4HANA (Manage Substitution/Validation Rules)
S
Patch status unknown
9.1
CVE-2026-89108
Missing Authorization check in SAP Manufacturing Integration and Intelligence (Configuration Service)
S
Patch status unknown
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2026-76972"