CVE-2026-76974
Received Received - Intake

SAP Fiori Launchpad Open Redirect Vulnerability

Publication date: 2026-09-22

Last updated on: 2026-09-22

Assigner: SAP SE

Description
SAP Fiori Launchpad does not sufficiently validate certain user-controlled input. An unauthenticated attacker could craft a malicious link that, when clicked by an authenticated user, causes the browser to load attacker-controlled content from an external location. This could be used to exfiltrate sensitive information from the victim's session, resulting in a high impact on confidentiality. There is no impact on integrity and availability.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-22
Last Modified
2026-09-22
Generated
2026-09-22
AI Q&A
2026-09-22
EPSS Evaluated
N/A
NVD
CVE-2026-76974
EUVD
EUVD-2026-84253

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
sap fiori_launchpad *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-95 The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluation call (e.g. "eval").

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

SAP Fiori Launchpad does not properly validate user input, allowing an unauthenticated attacker to craft a malicious link. When clicked by an authenticated user, this link loads attacker-controlled content from an external source, potentially exposing sensitive session data.

Detection Guidance

This vulnerability involves malicious links exploiting SAP Fiori Launchpad's insufficient input validation. Detection requires monitoring for unusual external content loads or suspicious links in user sessions. Check browser logs for unexpected external resource requests and inspect SAP Fiori logs for unauthorized data exfiltration attempts.

Impact Analysis

This vulnerability could lead to the theft of sensitive information from your session, such as personal data or credentials, due to the browser loading malicious external content. It does not affect system integrity or availability.

Compliance Impact

This vulnerability could result in unauthorized access to personal or sensitive data, potentially violating GDPR or HIPAA compliance requirements related to data protection and confidentiality.

Mitigation Strategies

Apply the latest SAP Security Notes from SAP's official resources, particularly SAP Note 3680888, to patch the vulnerability in SAP Fiori Launchpad. Monitor SAP's Security Patch Day announcements for updates and ensure all users avoid clicking untrusted links.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-76974. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart