CVE-2026-0495
Medium · 5.1CVSS
5.1
EPSS
0.2%
Published
Jan 13, 2026
CISA due date
—
The record
SAP Fiori App Intercompany Balance Reconciliation allows an attacker with high privileges to send uploaded files to arbitrary emails which could enable effective phishing campaigns. This has low impact on confidentiality, integrity and availability of the application.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-107818 MariaDB server is a community developed fork of MySQL server. CWE-15
- CVE-2026-87987 An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass… CWE-15
- CVE-2026-85217 A maliciously crafted add-in, when installed and executed in Autodesk Fusion Desktop, can… CWE-15
- CVE-2026-19592 OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS… CWE-15
- CVE-2026-16708 IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive… CWE-15
- CVE-2026-19884 In Eclipse Theia versions up to and including 1.69.0, opening a folder starts source… CWE-15
- CVE-2026-66065 Ouroboros is a local-first runtime for AI coding agents that records their actions and… CWE-15
- CVE-2026-0418 Insufficient configuration management in the listed devices allows authenticated… CWE-15