CVE-2026-109793

Vendor

SAP_SE

Product

SAP NetWeaver Application Server ABAP (Internet Communication Manager) and SAP Web Dispatcher

CVSS v3.1

7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness

CWE-121

Exposure class

Web platform, Network management

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 36
   CVE NVD 1h ago

   SAP NetWeaver Application Server ABAP and SAP Web Dispatcher do not sufficiently validate certain header values processed during inbound request…

   SAP NetWeaver Application Server ABAP and SAP Web Dispatcher do not sufficiently validate certain header values processed during inbound request handling. An unauthenticated attacker could send a specially crafted request to…

   CVSS 7.5 CVE-2026-109793 SAP_SE