Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-109802 EUVD-2026-120685GHSA-j6j3-x7fw-w7h6

Denial of Service (DoS) vulnerability in SAP NetWeaver Application Server for ABAP

Published Nov 10, 2026 · Updated Nov 10, 2026 · Assigned by sap

Description

SAP NetWeaver Application Server for ABAP does not properly validate certain input values. An authenticated user could send specially crafted requests to trigger an error in internal processing. This could crash the affected work process and make the system unavailable. This results in a high impact on availability with no impact on confidentiality and integrity.

Affected products

VendorProductAffectedFixed
SAP_SE SAP NetWeaver Application Server for ABAP KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.53, 8.04, KERNEL 7.22, 7.54, 7.77, 7.93, 9.16, 9.18, 9.20, 9.21 —

Advisories 2

References