Security
SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft
The Hacker News·October 13, 2026·1 min read
SAP disclosed a critical CVSS 10 flaw in its Cloud SDK for Python that can send an application's OAuth2 client credentials to an attacker-controlled server. The flaw affects multi-tenant applications on SAP Business Technology Platform using the SDK, and exploitation requires control of the tenant subdomain, SAP said in an advisory on October 13.
Read at The Hacker NewsDaily crypto arcade
Read the news, then play it.
Chainshorts turns crypto headlines into a daily game. Catch up in 60 words, then jump into daily lucky draws for a shot at the pot.