CVE-2026-89119

SAP Web Dispatcher and SAP NetWeaver Application Server ABAP Internet Communication Manager do not perform sufficient request validation in certain administrative functionality. In the context of Application Server ABAP and SAP Web Dispatcher, an unauthenticated attacker could trick a logged-on...

CVE-2026-76964

SAP NetWeaver Application Server ABAP does not sufficiently validate certain network input processed by an internal component. An unauthenticated attacker could send specially crafted network traffic to trigger a memory corruption condition in the affected functionality. Successful exploitation...

CVE-2026-76965

SAP NetWeaver Application Server ABAP and ABAP Platform does not perform necessary authorization checks for certain internal functionality. An attacker with low privileges could invoke affected functionality to execute arbitrary operating system commands on the underlying host. Successful...

CVE-2026-109794

SAP NetWeaver Application Server ABAP, ABAP Platform, and SAP Web Dispatcher do not sufficiently handle resource consumption when processing certain requests. An unauthenticated attacker could send specially crafted requests to the affected component, causing excessive resource utilization and...

CVE-2026-109796

SAP NetWeaver Application Server ABAP and ABAP Platform does not properly initialize memory in certain internal components. Under certain condition, an attacker with low privileges could disclose uninitialized memory contents under specific conditions. This results in a low impact on...

CVE-2026-109793

SAP NetWeaver Application Server ABAP and SAP Web Dispatcher do not sufficiently validate certain header values processed during inbound request handling. An unauthenticated attacker could send a specially crafted request to cause the affected process to become unavailable.This results in a high...

CVE-2026-109796

SAP NetWeaver Application Server ABAP and ABAP Platform are vulnerable due to improper memory initialization in specific internal components. An attacker with low privileges may be able to disclose uninitialized memory contents under certain conditions. This vulnerability has a low impact on conf...

EUVD-2026-120681

SAP NetWeaver Application Server ABAP and ABAP Platform does not properly initialize memory in certain internal components. Under certain condition, an attacker with low privileges could disclose uninitialized memory contents under specific conditions. This results in a low impact on...

CVE-2026-109794 Denial of Service vulnerability in SAP NetWeaver Application Server ABAP, ABAP Platform and SAP Web Dispatcher

SAP NetWeaver Application Server ABAP, ABAP Platform, and SAP Web Dispatcher do not sufficiently handle resource consumption when processing certain requests. An unauthenticated attacker could send specially crafted requests to the affected component, causing excessive resource utilization and...

CVE-2026-109794

SAP NetWeaver Application Server ABAP , ABAP Platform , and SAP Web Dispatcher are vulnerable to a high-impact availability issue. The software fails to sufficiently handle resource consumption when processing certain requests, which can be triggered by an unauthenticated attacker sending special...

EUVD-2026-120679

SAP NetWeaver Application Server ABAP, ABAP Platform, and SAP Web Dispatcher do not sufficiently handle resource consumption when processing certain requests. An unauthenticated attacker could send specially crafted requests to the affected component, causing excessive resource utilization and...

CVE-2026-109793

The SAP NetWeaver Application Server ABAP (Internet Communication Manager) and SAP Web Dispatcher are affected by a vulnerability where certain header values are not sufficiently validated during inbound request handling. An unauthenticated attacker could exploit this by sending a specially craft...

CVE-2026-109793 Denial of Service (DoS) vulnerability in SAP NetWeaver Application Server ABAP (Internet Communication Manager) and SAP Web Dispatcher

SAP NetWeaver Application Server ABAP and SAP Web Dispatcher do not sufficiently validate certain header values processed during inbound request handling. An unauthenticated attacker could send a specially crafted request to cause the affected process to become unavailable.This results in a high...

EUVD-2026-120678

SAP NetWeaver Application Server ABAP and SAP Web Dispatcher do not sufficiently validate certain header values processed during inbound request handling. An unauthenticated attacker could send a specially crafted request to cause the affected process to become unavailable.This results in a high...

CVE-2026-89119

SAP Web Dispatcher and SAP NetWeaver Application Server ABAP (Internet Communication Manager) are affected by a Cross-Site Request Forgery (CSRF) vulnerability (CWE-352) due to insufficient request validation in specific administrative functionalities. An unauthenticated attacker can trick a logg...

EUVD-2026-120665

SAP Web Dispatcher and SAP NetWeaver Application Server ABAP Internet Communication Manager do not perform sufficient request validation in certain administrative functionality. In the context of Application Server ABAP and SAP Web Dispatcher, an unauthenticated attacker could trick a logged-on...

CVE-2026-76965

SAP NetWeaver Application Server ABAP and ABAP Platform are vulnerable to an OS command injection due to insufficient authorization checks on certain internal functionalities. An attacker with low privileges can exploit this flaw to execute arbitrary commands on the underlying host. Successful ex...

EUVD-2026-120657

SAP NetWeaver Application Server ABAP and ABAP Platform does not perform necessary authorization checks for certain internal functionality. An attacker with low privileges could invoke affected functionality to execute arbitrary operating system commands on the underlying host. Successful...

EUVD-2026-120656

SAP NetWeaver Application Server ABAP does not sufficiently validate certain network input processed by an internal component. An unauthenticated attacker could send specially crafted network traffic to trigger a memory corruption condition in the affected functionality. Successful exploitation...

CVE-2026-76964

The SAP NetWeaver Application Server ABAP (specifically the Internet Communication Manager ) is vulnerable to a memory corruption condition due to insufficient validation of certain network inputs processed by an internal component. An unauthenticated attacker can exploit this by sending speciall...