Memory Corruption Vulnerability in SAP Web Dispatcher
CVE-2026-89126

10CRITICAL

Key Information:

Vendor

SAP

Vendor
CVE Published:
10 November 2026

What is CVE-2026-89126?

SAP Web Dispatcher is susceptible to a memory corruption vulnerability due to inadequate validation of network inputs by an internal component. An unauthenticated attacker could exploit this flaw by sending specially crafted network traffic, potentially leading to arbitrary code execution. This exploitation could compromise the system's confidentiality, integrity, and availability, posing significant risks to affected environments. Organizations utilizing SAP Web Dispatcher should implement the latest security updates to mitigate this vulnerability.

Affected Version(s)

SAP Web Dispatcher HDB 2.00

SAP Web Dispatcher KRNL64UC 7.53

SAP Web Dispatcher WEBDISP 7.53

References

CVSS V3.1

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.