medium2026-11-10SAP NetWeaver and ABAP Platform (Application Server ABAP)CVE-2026-109811

Server-Side Request Forgery in SAP NetWeaver and ABAP Platform (Application Server ABAP)

SAP NetWeaver and ABAP Platform (Application Server ABAP)

Vulnerability Detail

SAP lists this as a medium issue (CVSS 6.5) affecting SAP NetWeaver and ABAP Platform (Application Server ABAP). Affected versions and fix details are in the official note.

Patch Action

Review SAP Note 3805959 and apply the fix it describes. Our editorial recommendation: include in your regular maintenance cycle and verify against the official note.

Patch Info

CVSS Score

6.5

SAP Note

3805959 ↗

CVE

CVE-2026-109811

Published

2026-11-10

← All patches