SAP Internet Graphics Server (IGS) - XML External Entity Injection

SAP Internet Graphics Servers IGS running versions 7.20, 7.20EXT, 7.45, 7.49, or 7.53 has two XML external entity injection XXE vulnerabilities within the XMLCHART page - CVE-2018-2392 and CVE-2018-2393. These vulnerabilities occur due to a lack of appropriate validation on the Extension HTML tag...

CVE-2026-109807

SAP NetWeaver Internet Graphics Service does not sufficiently validate certain input values within incoming requests. An unauthenticated user could send a specially crafted request causing the affected process to read beyond the declared values, resulting in repeated termination of the worker...

CVE-2026-120008

SAP NetWeaver Internet Graphics Service does not sufficiently validate certain input values within incoming requests. An unauthenticated user could send a specially crafted request to trigger an out-of-bounds memory write in a worker process. Successful exploitation could result in memory...

CVE-2026-109806

SAP NetWeaver Internet Graphics Service does not sufficiently validate certain input values within incoming requests. An unauthenticated user could send a specially crafted request containing malformed image data, triggering an integer overflow that leads to repeated termination of the worker...

EUVD-2026-120694

SAP NetWeaver Internet Graphics Service does not sufficiently validate certain input values within incoming requests. An unauthenticated user could send a specially crafted request to trigger an out-of-bounds memory write in a worker process. Successful exploitation could result in memory...

CVE-2026-120008 Memory Corruption Vulnerability in SAP NetWeaver (Internet Graphics Service)

SAP NetWeaver Internet Graphics Service does not sufficiently validate certain input values within incoming requests. An unauthenticated user could send a specially crafted request to trigger an out-of-bounds memory write in a worker process. Successful exploitation could result in memory...

CVE-2026-120008

The SAP NetWeaver (Internet Graphics Service) component is vulnerable to an out-of-bounds memory write because it fails to sufficiently validate certain input values within incoming requests. An unauthenticated user can exploit this by sending a specially crafted request to trigger the vulnerabil...

CVE-2026-109807 Multiple Vulnerabilities in SAP NetWeaver (Internet Graphics Service)

SAP NetWeaver Internet Graphics Service does not sufficiently validate certain input values within incoming requests. An unauthenticated user could send a specially crafted request causing the affected process to read beyond the declared values, resulting in repeated termination of the worker...

CVE-2026-109807

The SAP NetWeaver (Internet Graphics Service) is vulnerable to an issue where it does not sufficiently validate certain input values within incoming requests. An unauthenticated user can send a specially crafted request that causes the affected process to read beyond declared values. This leads t...

EUVD-2026-120689

SAP NetWeaver Internet Graphics Service does not sufficiently validate certain input values within incoming requests. An unauthenticated user could send a specially crafted request causing the affected process to read beyond the declared values, resulting in repeated termination of the worker...

CVE-2026-109806 Multiple Vulnerabilities in SAP NetWeaver (Internet Graphics Service)

SAP NetWeaver Internet Graphics Service does not sufficiently validate certain input values within incoming requests. An unauthenticated user could send a specially crafted request containing malformed image data, triggering an integer overflow that leads to repeated termination of the worker...

EUVD-2026-120688

SAP NetWeaver Internet Graphics Service does not sufficiently validate certain input values within incoming requests. An unauthenticated user could send a specially crafted request containing malformed image data, triggering an integer overflow that leads to repeated termination of the worker...

CVE-2026-109806

The SAP NetWeaver (Internet Graphics Service) component is vulnerable to an integer overflow because it does not sufficiently validate certain input values within incoming requests. An unauthenticated user can exploit this by sending a specially crafted request containing malformed image data , w...

PT-2026-141259

SAP NetWeaver Internet Graphics Service does not sufficiently validate certain input values within incoming requests. An unauthenticated user could send a specially crafted request to trigger an out-of-bounds memory write in a worker process. Successful exploitation could result in memory...

CVE-2026-120008: SAP_SE SAP NetWeaver (Internet Graphics Service): SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming requests

SAP NetWeaver Internet Graphics Service does not sufficiently validate certain input values within incoming requests. An unauthenticated user could send a specially crafted request to trigger an out-of-bounds memory write in a worker process. Successful exploitation could result in memory...

CVE-2026-109806: SAP_SE SAP NetWeaver (Internet Graphics Service): SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming requests

SAP NetWeaver Internet Graphics Service does not sufficiently validate certain input values within incoming requests. An unauthenticated user could send a specially crafted request containing malformed image data, triggering an integer overflow that leads to repeated termination of the worker...

CVE-2026-109807: SAP_SE SAP NetWeaver (Internet Graphics Service): SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming requests

SAP NetWeaver Internet Graphics Service does not sufficiently validate certain input values within incoming requests. An unauthenticated user could send a specially crafted request causing the affected process to read beyond the declared values, resulting in repeated termination of the worker...

PT-2026-141253

SAP NetWeaver Internet Graphics Service does not sufficiently validate certain input values within incoming requests. An unauthenticated user could send a specially crafted request containing malformed image data, triggering an integer overflow that leads to repeated termination of the worker...

PT-2026-141254

SAP NetWeaver Internet Graphics Service does not sufficiently validate certain input values within incoming requests. An unauthenticated user could send a specially crafted request causing the affected process to read beyond the declared values, resulting in repeated termination of the worker...

SAP Internet Graphics Server (IGS) Detection

Detection of SAP Internet Graphics Server IGS !/usr/bin/env python3 -- coding: utf-8 -- """Detection of SAP Internet Graphics Server IGS.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SAP Internet Graphics Server I...