{"affected":[{"defaultStatus":"unaffected","product":"SAP NetWeaver Application Server (SAP Message Server)","source":"CNA: sap","vendor":"SAP_SE","versions":[{"status":"affected","version":"KRNL64NUC 7.22"},{"status":"affected","version":"7.22EXT"},{"status":"affected","version":"KRNL64UC 7.22"},{"status":"affected","version":"7.53"},{"status":"affected","version":"KERNEL 7.22"},{"status":"affected","version":"7.54"},{"status":"affected","version":"7.77"},{"status":"affected","version":"7.93"},{"status":"affected","version":"9.16"},{"status":"affected","version":"9.18"},{"status":"affected","version":"9.20"},{"status":"affected","version":"9.21"}]}],"cveId":"CVE-2026-120010","cwes":["CWE-131"],"description":"SAP NetWeaver Application Server (SAP Message Server) does not properly size memory allocations when handling certain HTTP requests. An unauthenticated attacker could send a specially crafted request to trigger a heap buffer overflow in affected functionality. Successful exploitation causes the component to abort and remain unavailable until it is restarted by the framework, resulting in a high impact on availability of the system. There is no impact on confidentiality and integrity of the application.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":7.5,"severity":"high","source":"CNA: sap","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"}],"modifiedAt":1794271319668,"publishedAt":1794271319668,"references":[{"source":"CNA: sap","tags":[],"url":"https://me.sap.com/notes/3805570"},{"source":"CNA: sap","tags":[],"url":"https://url.sap/sapsecuritypatchday"}],"remediation":[],"revision":"029d391763a886d1522665066ce392b16432b16052077ab2262823130a8a501b","sources":[{"modifiedAt":1794271319668,"name":"CNA: sap","retrievedAt":1794272928851,"url":"https://www.cve.org/CVERecord?id=CVE-2026-120010"}],"ssvc":null,"status":"published","title":"Memory Corruption vulnerability in SAP NetWeaver Application Server (SAP Message Server)","updatedAt":1794272928851}