SAP Web Dispatcher does not sufficiently validate certain network input processed by an internal component.
SAP Web Dispatcher does not sufficiently validate certain network input processed by an internal component. An unauthenticated attacker could send specially crafted network traffic to trigger a memory corruption condition in the affected functionality. Successful exploitation could allow the attacker to execute arbitrary code and fully compromise the system, resulting in a high impact on confidentiality, integrity and availability of the system.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- SAP_SE
- Product
- SAP Web Dispatcher
- CVSS v3.1
- 10.0 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
- Weakness
- CWE-122
- Exposure class
- Network management
- NVD status
- Received
Why it ranks 44 (Notable)
- CVSS v3.1 10.0 critical
- Product class: network management
- Widely deployed vendor product (SAP_SE)
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-89126 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.