CVE-2026-109806
HIGH
NVD
CVSS Score
7.5
Severity
HIGH
Published
Nov 10, 2026
Vendor
unknown
Description
SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming requests. An unauthenticated user could send a specially crafted request containing malformed image data, triggering an integer overflow that leads to repeated termination of the worker process. This results in a high impact on availability with no impact on integrity or confidentiality.