CVE-2026-109794: Denial of Service vulnerability in SAP NetWeaver Application Server ABAP, ABAP Platform and SAP Web Dispatcher
SAP NetWeaver Application Server ABAP, ABAP Platform, and SAP Web Dispatcher do not sufficiently handle resource consumption when processing certain requests. An unauthenticated attacker could send specially crafted requests to the affected component, causing excessive resource utilization and service disruption. This results in a high impact on availability. There is no impact on confidentiality and integrity.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An unauthenticated attacker can exploit it by sending specially crafted requests to an affected component. No privileges or user interaction are required.
What is the expected impact if exploitation succeeds?
Successful exploitation can cause excessive resource utilization and disrupt service availability. The provided information indicates no confidentiality or integrity impact.
Are SAP Web Dispatcher deployments included?
Yes. SAP Web Dispatcher is listed alongside SAP NetWeaver Application Server ABAP and SAP ABAP Platform as affected software.