Skip to content

#web-dispatcher

2 articles

Security Alerts Nov 10, 2026

CVE-2026-89119: CSRF in Admin Functions of SAP Web Dispatcher and ICM

SAP Web Dispatcher and the ICM of SAP NetWeaver AS ABAP do not validate requests in some administrative functions. A link opened by a logged-on administrator can lead to full compromise of the operating system...

Security Alerts Nov 10, 2026

CVE-2026-89126: Unauthenticated Heap Overflow RCE in SAP Web Dispatcher

An internal component of SAP Web Dispatcher does not validate certain network input. An unauthenticated attacker can send crafted traffic to corrupt memory, execute arbitrary code and take over the system...