CVE-2026-58249: SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager) HDB 2.00, KRNL64UC 7.53, WEBDISP 7.53, 7.54…

Affected technology

SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager) · HDB 2.00, KRNL64UC 7.53, WEBDISP 7.53, 7.54, 7.77, 7.93, 9.16, XS_ADVANCED_RUNTIME 1.00, SAP_EXTENDED_APP_SERVICES 1, CONTSERV 7.53, KERNEL 7.53, 9.18, 9.19, 9.20
SAP_SE

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

An unauthenticated attacker could send a malicious request that triggers a memory-handling error, causing the affected process to crash. Vendor/CNA’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high.