SAP Message Server Malformed Request Vulnerability

CVE-2026-109804

What is CVE-2026-109804?

The SAP Message Server is susceptible to an issue where it inadequately processes certain malformed requests, which can be exploited by an unauthenticated attacker. By sending specially crafted input, an attacker may be able to access confidential information, thereby compromising the confidentiality of sensitive data. However, this vulnerability does not affect the system's integrity or availability. For more details, you can refer to SAP's official notes and security patch guidance.

References