Input Validation Flaw in SAP Web Dispatcher by SAP

CVE-2026-109800

What is CVE-2026-109800?

The SAP Web Dispatcher demonstrates a critical flaw in input validation processes that can lead to memory corruption. An attacker, authenticated as a non-administrative user, can exploit this weakness by supplying specially crafted inputs. This exploitation may cause the Web Dispatcher process to halt unexpectedly, resulting in a denial of service not only for the Web Dispatcher itself but also for all backend systems accessed through it. Importantly, while this vulnerability affects system availability, it does not compromise the confidentiality or integrity of the application's data. Organizations utilizing SAP Web Dispatcher should promptly address this vulnerability to maintain operational continuity.

References