Is CVE-2026-89106 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-89106?

CVE-2026-89106 has a CVSS v3 severity of MEDIUM (4.4).

Back

CVE-2026-89106

Description

SAP UI5 does not perform sufficient input validation under certain configurations. An attacker with low privileges could submit specially crafted content that is later rendered in a victim's browser. This vulnerability has a low impact on confidentiality and integrity. There is no impact on availability.