CVE-2026-109806

Vendor

SAP_SE

Product

SAP NetWeaver (Internet Graphics Service)

CVSS v3.1

7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness

CWE-125

Exposure class

Web platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 36
   CVE NVD 1h ago

   SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming requests.

   SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming requests. An unauthenticated user could send a specially crafted request containing malformed image data, triggering an…

   CVSS 7.5 CVE-2026-109806 SAP_SE