{"affected":[{"defaultStatus":"unaffected","product":"SAP NetWeaver (Internet Graphics Service)","source":"CNA: sap","vendor":"SAP_SE","versions":[{"status":"affected","version":"BC-FES-IGS 7.20EXT"},{"status":"affected","version":"7.20_EXT2"},{"status":"affected","version":"7.53"},{"status":"affected","version":"7.54"},{"status":"affected","version":"7.81"},{"status":"affected","version":"9.16"}]}],"cveId":"CVE-2026-109806","cwes":["CWE-125"],"description":"SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming requests. An unauthenticated user could send a specially crafted request containing malformed image data, triggering an integer overflow that leads to repeated termination of the worker process. This results in a high impact on availability with no impact on integrity or confidentiality.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":7.5,"severity":"high","source":"CNA: sap","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"}],"modifiedAt":1794271187492,"publishedAt":1794271187492,"references":[{"source":"CNA: sap","tags":[],"url":"https://me.sap.com/notes/3809934"},{"source":"CNA: sap","tags":[],"url":"https://url.sap/sapsecuritypatchday"}],"remediation":[],"revision":"b64fb52a2a719793f7817cedb5dff6f42cd6b18cb944eef7f917823fe7dc3b98","sources":[{"modifiedAt":1794271187492,"name":"CNA: sap","retrievedAt":1794272917823,"url":"https://www.cve.org/CVERecord?id=CVE-2026-109806"}],"ssvc":null,"status":"published","title":"Multiple Vulnerabilities in SAP NetWeaver (Internet Graphics Service)","updatedAt":1794272917823}