Boletines de Vulnerabilidades

CVE-2026-109807

   
Software afectado SAP
 
SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming requests. An unauthenticated user could send a specially crafted request causing the affected process to read beyond the declared values, resulting in repeated termination of the worker process. This results in a high impact on availability with no impact on integrity or confidentiality.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-109807