CVE-2026-109807

Vendor

SAP_SE

Product

SAP NetWeaver (Internet Graphics Service)

CVSS v3.1

7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness

CWE-190

Exposure class

Web platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 36
   CVE NVD 1h ago

   SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming requests.

   SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming requests. An unauthenticated user could send a specially crafted request causing the affected process to read beyond…

   CVSS 7.5 CVE-2026-109807 SAP_SE