CVE-2026-109801

Vendor

SAP_SE

Product

SAP NetWeaver Application Server Java (NWDI Cockpit)

CVSS v3.1

6.5 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness

CWE-639

Exposure class

Web platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 29
   CVE NVD 3h ago

   SAP NetWeaver Application Server Java (NWDI Cockpit)� does not perform sufficient authorization checks for certain functionality that retrieves…

   SAP NetWeaver Application Server Java (NWDI Cockpit)� does not perform sufficient authorization checks for certain functionality that retrieves sensitive information. An attacker with low privileges could send a specially crafted…

   CVSS 6.5 CVE-2026-109801 SAP_SE