Vulnerability Bulletins |
CVE-2026-109806 |
|
| Affected software | SAP |
| SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming requests. An unauthenticated user could send a specially crafted request containing malformed image data, triggering an integer overflow that leads to repeated termination of the worker process. This results in a high impact on availability with no impact on integrity or confidentiality. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-109806 | |