CVE-2026-120008
HIGH
NVD
CVSS Score
8.2
Severity
HIGH
Published
Nov 10, 2026
Vendor
unknown
Description
SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming requests. An unauthenticated user could send a specially crafted request to trigger an out-of-bounds memory write in a worker process. Successful exploitation could result in memory corruption or repeated termination of the affected process, resulting in a high impact on availability and a low impact on integrity with no impact on confidentiality.