CVE-2026-109809: Security Vulnerabilities SAP NetWeaver Application Server Java (NWDI Cockpit)
Published Nov 10, 2026
·Updated
SAP NetWeaver Application Server Java (NWDI Cockpit) does not perform sufficient authorization checks for certain functionality before processing the requests. An attacker with low privileges could exploit this to perform unauthorized modifications. Successful exploitation results in high impact on integrity, with no impact on confidentiality and availability of the application.
Affected Software
1 affected component
SAP NetWeaver Application Server Java (NWDI Cockpit)
Event History
Nov 10, 2026
CVE Published
via MITRE·12:40 AM
Data Sourced
via MITRE·12:40 AM
DescriptionSeverity
Data Sourced
via NVD·01:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
An attacker needs low-privileged access to SAP NetWeaver Application Server Java (NWDI Cockpit). Exploitation does not require user interaction and can be performed over the network.
2
What is the expected impact if exploitation succeeds?
Successful exploitation allows unauthorized modifications, resulting in a high integrity impact. The provided information indicates no confidentiality or availability impact.