CVE-2026-109809

The SAP NetWeaver Application Server Java (NWDI Cockpit) is vulnerable to a flaw where it fails to perform sufficient authorization checks before processing specific requests. This vulnerability allows an attacker with low privileges to perform unauthorized modifications , leading to a high impac...

CVE-2026-109801

The SAP NetWeaver Application Server Java (NWDI Cockpit) contains a vulnerability where it fails to perform sufficient authorization checks for specific functions that retrieve sensitive information. An attacker with low privileges can exploit this by sending a specially crafted request to access...