Forkast·Oct 18, 2026, 1:22 PM UTC

SAP Cloud SDK for Python Lets Attackers Steal OAuth2 Credentials Through a Tenant Subdomain Input — CVSS 10.0

Your call?

CVSS 10.0

vulnerability severity score

An attacker can hijack OAuth2 token requests in the SAP Cloud SDK for Python by manipulating the tenant_subdomain parameter, a flaw that exposes application client IDs and secrets without requiring authentication. This Server-Side Request…

Read the full story at Forkast →Follow @lypp for breaking news

Cryptonews
Bitcoin Price Forecast: $81,500 Leaves Weekly Close Needing a Big Push
Crypto Briefing
Nvidia is expected to capture about $700 billion of a $1.6 trillion AI capex boom
BeInCrypto
Could Bitcoin Price Drop to $10,000? Bloomberg Analyst Gives Grim Warning
Crypto Briefing
Morgan Stanley ties S&P 500 growth to a $1.6 trillion AI spending wave
Crypto Briefing
TSMC holds its capex plan at up to $64 billion as AI demand outruns supply
Crypto Briefing
Nvidia is projected to sell about $430 billion in chips this year

SAP Cloud SDK for Python Lets Attackers Steal OAuth2 Credentials Through a Tenant Subdomain Input — CVSS 10.0

More news