critical2026-11-10SAP Web Dispatcher and Internet Communication ManagerCVE-2026-89119
CSRF in SAP Web Dispatcher and Internet Communication Manager
SAP Web Dispatcher and Internet Communication Manager
Vulnerability Detail
SAP lists this as a critical issue (CVSS 9.6) affecting SAP Web Dispatcher and Internet Communication Manager. Also tracked as CVE-2026-120014. Affected versions and fix details are in the official note.
Patch Action
Review SAP Note 3804858 and apply the fix it describes. Our editorial recommendation: treat as urgent and verify against the official note before acting.
Patch Info