Skip to content
OpenAdvisories
High · 7.7 CVE-2026-109800 EUVD-2026-120683GHSA-mqw9-r9xr-p7cq

Memory Corruption vulnerability in SAP Web Dispatcher

Published Nov 10, 2026 · Updated Nov 10, 2026 · Assigned by sap

Description

SAP Web Dispatcher does not sufficiently validate certain inputs during processing, which could lead to memory corruption. An attacker authenticated as a non-administrative user could exploit this vulnerability by providing specially crafted input, causing the Web Dispatcher process to terminate without user interaction. As a result, the Web Dispatcher and all backend systems reachable through it become unavailable, leading to a high impact on availability. There is no impact on confidentiality or integrity of the application.

Affected products

VendorProductAffectedFixed
SAP_SE SAP Web Dispatcher KRNL64UC 7.53, WEBDISP 7.53, 7.54, 7.77, 7.93, 9.16, KERNEL 7.53, 9.20, 9.21 —

Advisories 2

References