critical2026-11-10SAP NetWeaver Knowledge Management (XML Forms)CVE-2026-109803

Code Injection in SAP NetWeaver Knowledge Management (XML Forms)

SAP NetWeaver Knowledge Management (XML Forms)

Vulnerability Detail

SAP lists this as a critical issue (CVSS 9.9) affecting SAP NetWeaver Knowledge Management (XML Forms). Affected versions and fix details are in the official note.

Patch Action

Review SAP Note 3809153 and apply the fix it describes. Our editorial recommendation: treat as urgent and verify against the official note before acting.

Patch Info

Priority

🔴 Patch immediately

CVSS Score

9.9

SAP Note

3809153 ↗

CVE

CVE-2026-109803

Published

2026-11-10

← All patches