Medium severity6.5NVD Advisory· Published Nov 10, 2026

CVE-2026-109809

Description

SAP NetWeaver Application Server Java (NWDI Cockpit) does not perform sufficient authorization checks for certain functionality before processing the requests. An attacker with low privileges could exploit this to perform unauthorized modifications. Successful exploitation results in high impact on integrity, with no impact on confidentiality and availability of the application.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

SAP/Netweaver Application Server Javallm-fuzzy

Patches

Vulnerability mechanics

References

me.sap.com/notes/3839977nvd
url.sap/sapsecuritypatchdaynvd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000