← Database

CVE-2026-89126

CRITICAL CVSS: 10.0 Published: 2026-11-10 Modified: 2026-11-10

Description

SAP Web Dispatcher does not sufficiently validate certain network input processed by an internal component. An unauthenticated attacker could send specially crafted network traffic to trigger a memory corruption condition in the affected functionality. Successful exploitation could allow the attacker to execute arbitrary code and fully compromise the system, resulting in a high impact on confidentiality, integrity and availability of the system.

Affected Platforms

Unknown

Weakness Type

CWE-122

References