PT-2026-141243

CVE-2026-109794

·

Published

2026-11-10

·

Updated

2026-11-10

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
SAP NetWeaver Application Server ABAP, ABAP Platform, and SAP Web Dispatcher do not sufficiently handle resource consumption when processing certain requests. An unauthenticated attacker could send specially crafted requests to the affected component, causing excessive resource utilization and service disruption. This results in a high impact on availability. There is no impact on confidentiality and integrity.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-835: Loop with Unreachable Exit Condition (\'Infinite Loop\')
Related identifiers
CVE-2026-109794
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com