{"affected":[{"defaultStatus":"unaffected","product":"SAP NetWeaver (Internet Graphics Service)","source":"CNA: sap","vendor":"SAP_SE","versions":[{"status":"affected","version":"BC-FES-IGS 7.20EXT"},{"status":"affected","version":"7.20_EXT2"},{"status":"affected","version":"7.53"},{"status":"affected","version":"7.54"},{"status":"affected","version":"7.81"},{"status":"affected","version":"9.16"}]}],"cveId":"CVE-2026-109807","cwes":["CWE-190"],"description":"SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming requests. An unauthenticated user could send a specially crafted request causing the affected process to read beyond the declared values, resulting in repeated termination of the worker process. This results in a high impact on availability with no impact on integrity or confidentiality.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":7.5,"severity":"high","source":"CNA: sap","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"}],"modifiedAt":1794271203951,"publishedAt":1794271203951,"references":[{"source":"CNA: sap","tags":[],"url":"https://me.sap.com/notes/3809934"},{"source":"CNA: sap","tags":[],"url":"https://url.sap/sapsecuritypatchday"}],"remediation":[],"revision":"c67f2143f13521d6ec02173efac5cf8e6133eee89979bf199a6f1c0dc365435c","sources":[{"modifiedAt":1794271203951,"name":"CNA: sap","retrievedAt":1794272918919,"url":"https://www.cve.org/CVERecord?id=CVE-2026-109807"}],"ssvc":null,"status":"published","title":"Multiple Vulnerabilities in SAP NetWeaver (Internet Graphics Service)","updatedAt":1794272918919}