MinorCritical vulnerability

CVE-2026-109794 (CVSS 7.5)

NVD · officialPublished Nov 10, 2026Risk 23/100

SAP NetWeaver Application Server ABAP, ABAP Platform, and SAP Web Dispatcher do not sufficiently handle resource consumption when processing certain requests. An unauthenticated attacker could send specially crafted requests to the affected component, causing excessive resource utilization and service disruption. This results in a high impact on availability. There is no impact on confidentiality and integrity.

Technical details

CVSS

7.5

AV:NetworkAC:LowPR:NoneUI:NoneC:NoneI:NoneA:High

Evidence and sources

This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.

Open primary source