CVE-2026-109809

Vendor

SAP_SE

Product

SAP NetWeaver Application Server Java (NWDI Cockpit)

CVSS v3.1

6.5 AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weakness

CWE-862

Exposure class

Web platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 29
   CVE NVD 3h ago

   SAP NetWeaver Application Server Java (NWDI Cockpit) does not perform sufficient authorization checks for certain functionality before processing the…

   SAP NetWeaver Application Server Java (NWDI Cockpit) does not perform sufficient authorization checks for certain functionality before processing the requests. An attacker with low privileges could exploit this to perform…

   CVSS 6.5 CVE-2026-109809 SAP_SE