Is CVE-2026-89118 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-89118?

CVE-2026-89118 has a CVSS v3 severity of MEDIUM (5.3).

Back

CVE-2026-89118

Description

SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to access restricted resources and retrieve non-critical application information, which leads to Low impact on Confidentiality, but there is no impact on Integrity and Availability of the application.