CVE Watch14 jul 2026

CVE-2026-44753

SAP HANA Database (user self service tools) allows an unauthenticated user to send specially crafted requests that produce distinguishable r

CVSS

3.7

Bajo

EPSS

0.3%

p28

KEV

—

Exploit Today

0-100

Publicado: 14 jul 2026 · Última mod.: 14 jul 2026 · CWE-204

EPSS · 30d

0.2%EPSS · 30 días0.3%

2026-08-182026-09-15

Descripción técnica

SAP HANA Database (user self service tools) allows an unauthenticated user to send specially crafted requests that produce distinguishable responses, enabling enumeration of valid user accounts and email addresses. Successful exploitation could allow the attacker to enumerate valid user accounts, resulting in low impact on confidentiality, with no impact on integrity and availability of the application.

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-891735.3 MED

18.0%

——5Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses.5d CVE-2026-91615.3 MED

9.7%

——3Observable response discrepancy vulnerability in DernekPlus Website Template allows Account Footprinting. This issue affects Website Template: through 10092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.6d CVE-2026-867586.5 MED

13.6%

——4Snipe-IT before 8.7.0 fails to properly enforce the viewKeys authorization gate in CSV export and API index endpoints, allowing authenticated users with only licenses.view permission to access product keys. Attackers can download all license keys in bulk via CSV export or validate candidate keys through API response discrepancies without needing the viewKeys permission.7d CVE-2026-192057.5 ALT

15.8%

——5Observable response discrepancy vulnerability in GastroMenum GastroMenum Web Panel allows Account Footprinting. This issue affects GastroMenum Web Panel: before 31.08.2026.8d CVE-2026-190807.5 ALT

22.9%

——7Observable response discrepancy vulnerability in Menulux Software Inc. Menulux Portal allows Account Footprinting. This issue affects Menulux Portal: before 20260903211448.8d CVE-2026-785844.3 MED

13.3%

——4Observable Response Discrepancy (CWE-204) in the Kibana Osquery feature can lead to information disclosure via Query System for Information (CAPEC-54). An authenticated user holding Osquery live-query privileges could determine whether a scheduled query identifier exists in a Kibana space they are not authorized to access.13d