VYPR

NetWeaver Feedback Notifications Service

by SAP

CVEs (1)

  • CVE-2026-27684MedMar 10, 2026
    risk 0.42cvss 6.4epss 0.00

    SAP NetWeaver Feedback Notifications Service contains a SQL injection vulnerability that allows an authenticated attacker to inject arbitrary SQL code through user-controlled input fields. The application concatenates these inputs directly into SQL queries without proper…