SAP patches 20 flaws; max-severity OAuth2 SSRF in Cloud SDK for Python

SAP's October 2026 security updates fix 20 vulnerabilities, including a maximum-severity OAuth2 SSRF flaw in the Cloud SDK for Python. The flaw could allow unauthorized access to internal cloud resources, though exploitation details remain undisclosed. Enterprises relying on SAP cloud integrations face elevated risk if patches are not applied promptly.