Skip to content
OpenAdvisories
High · 7.5 CVE-2026-109806 EUVD-2026-120688GHSA-fxfg-m245-fqp8

Multiple Vulnerabilities in SAP NetWeaver (Internet Graphics Service)

Published Nov 10, 2026 · Updated Nov 10, 2026 · Assigned by sap

Description

SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming requests. An unauthenticated user could send a specially crafted request containing malformed image data, triggering an integer overflow that leads to repeated termination of the worker process. This results in a high impact on availability with no impact on integrity or confidentiality.

Affected products

VendorProductAffectedFixed
SAP_SE SAP NetWeaver (Internet Graphics Service) BC-FES-IGS 7.20EXT, 7.20_EXT2, 7.53, 7.54, 7.81, 9.16 —

Advisories 2

References