Medium 6.5

SAP NetWeaver Application Server for ABAP does not properly validate certain input values. An...

CVE-2026-109802 First seen on SecPulse Nov 10, 09:38

Original description The description as published by the source.

SAP NetWeaver Application Server for ABAP does not properly validate certain input values. An authenticated user could send specially crafted requests to trigger an error in internal processing. This could crash the affected work process and make the system unavailable. This results in a high impact on availability with no impact on confidentiality and integrity.

Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory

References

Key facts

CVSS v3: Medium 6.5; CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Published: Nov 10, 2026
First seen on SecPulse: Nov 10, 09:38
GHSA: GHSA-j6j3-x7fw-w7h6
CWE: CWE-369

NVD GitHub Advisory

Tags(click for explanation)

Attack Types

Denial of Service

All

CWE-369 Sap Se Sap Netweaver Application Server For Abap

Detection sources

NIST National Vulnerability Database07:11
GitHub Security Advisories (Global)Nov 10, 12:30
CVE.org (CVE Program・cvelistV5)05:34