{"id":"CVE-2026-89106","published":"2026-10-13T01:16:47.373","lastModified":"2026-10-15T20:38:04.303","description":"SAP UI5 does not perform sufficient input validation under certain configurations. An attacker with low privileges could submit specially crafted content that is later rendered in a victim's browser. This vulnerability has a low impact on confidentiality and integrity. There is no impact on availability.","cvssScore":4.4,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N","cwes":["CWE-183"],"vendors":[],"products":[],"references":[{"url":"https://me.sap.com/notes/3799054","tags":[]},{"url":"https://url.sap/sapsecuritypatchday","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}