CVE-2026-109800
HIGH
MEDIUM
Priority: 0.02
BB Relevance:
65/100
Published: 2026-11-10
Modified: 2026-11-10
First seen: 2026-11-10
Status: active
Attack Surface
Network
Low Complexity
No Interaction
Scope Change
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
Low
UI:
None
S:
Changed
C:
None
I:
None
A:
High
Description
SAP Web Dispatcher does not sufficiently validate certain inputs during processing, which could lead to memory corruption. An attacker authenticated as a non-administrative user could exploit this vulnerability by providing specially crafted input, causing the Web Dispatcher process to terminate without user interaction. As a result, the Web Dispatcher and all backend systems reachable through it become unavailable, leading to a high impact on availability. There is no impact on confidentiality or integrity of the application.
Weakness Classification (1)
Affected Software (18)
| Vendor | Product | Version |
|---|---|---|
| SAP_SE | SAP Web Dispatcher | KRNL64UC 7.53 |
| SAP_SE | SAP Web Dispatcher | WEBDISP 7.53 |
| SAP_SE | SAP Web Dispatcher | 7.54 |
| SAP_SE | SAP Web Dispatcher | 7.77 |
| SAP_SE | SAP Web Dispatcher | 7.93 |
| SAP_SE | SAP Web Dispatcher | 9.16 |
| SAP_SE | SAP Web Dispatcher | KERNEL 7.53 |
| SAP_SE | SAP Web Dispatcher | 9.20 |
| SAP_SE | SAP Web Dispatcher | 9.21 |
| SAP_SE | SAP Web Dispatcher | KRNL64UC 7.53 |
| SAP_SE | SAP Web Dispatcher | WEBDISP 7.53 |
| SAP_SE | SAP Web Dispatcher | 7.54 |
| SAP_SE | SAP Web Dispatcher | 7.77 |
| SAP_SE | SAP Web Dispatcher | 7.93 |
| SAP_SE | SAP Web Dispatcher | 9.16 |
| SAP_SE | SAP Web Dispatcher | KERNEL 7.53 |
| SAP_SE | SAP Web Dispatcher | 9.20 |
| SAP_SE | SAP Web Dispatcher | 9.21 |