CVE-2026-76974

Name of the Vulnerable Software and Affected Versions SAP Fiori Launchpad (affected versions not specified)

Description SAP Fiori Launchpad fails to sufficiently validate certain user-controlled input. This allows an unauthenticated attacker to craft a malicious link that, if clicked by an authenticated user, forces the browser to load content from an external location controlled by the attacker. This mechanism can be used to exfiltrate sensitive information from the victim's session, leading to a high impact on confidentiality.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.